CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.5.3 via the 'type' parameter found in the alm_get_layout() function. This makes it possible for authenticated attackers, with administrative permissions, to read the contents of arbitrary files on the server, which can contain sensitive information.
Explanation of Vulnerability in Simple Terms
Ajax Load More contains a path traversal vulnerability that allows authenticated administrators to read files outside the plugin's intended directory. An attacker with admin privileges can craft requests to access sensitive files on the server. The vulnerability affects versions up to 5.5.3 and requires high-level site access to exploit.
What an attacker can do
Read arbitrary files on the server outside the plugin directory.
Potential impact on your site
An admin account compromise could expose sensitive configuration files, database credentials, or other private data.
Conditions required to exploit
Attacker must have administrator-level access to the WordPress site.
Key dates
External resources
Related vulnerabilities
