CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The WordPress Infinite Scroll – Ajax Load More plugin for Wordpress is vulnerable to arbitrary file reading in versions up to, and including, 5.5.3 due to insufficient file path validation on the alm_repeaters_export() function. This makes it possible for authenticated attackers, with administrative privileges, to download arbitrary files hosted on the server that may contain sensitive content, such as the wp-config.php file.
Explanation of Vulnerability in Simple Terms
Ajax Load More contains a path traversal vulnerability that allows authenticated administrators to read files outside the plugin's intended directory. An attacker with admin privileges can craft requests to access sensitive files on the server. The vulnerability affects versions up to 5.5.3 and requires high-level site access to exploit.
What an attacker can do
Read arbitrary files on the server outside the plugin directory.
Potential impact on your site
An admin account compromise could expose sensitive configuration files, database credentials, or other private data.
Conditions required to exploit
Attacker must have administrator-level access to the WordPress site.
Key dates
External resources
Related vulnerabilities
