CVE-2021-24140

CVE-2021-24140: Ajax Load More < 5.3.2 - Authenticated SQL Injection

Vendor Unknown
Product Ajax Load More
Weakness CWE-89 · SQLi
Published March 18, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test.

Key dates

02Disclosure timeline

March 18, 2021 CVE published
August 3, 2024 Record updated