CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Darren Cooney Ajax Load More ajax-load-more allows Retrieve Embedded Sensitive Data.This issue affects Ajax Load More: from n/a through <= 7.6.0.2.
Explanation of Vulnerability in Simple Terms
Ajax Load More versions up to 7.6.0.2 expose sensitive information through improper access controls. An unauthenticated attacker can read data that should be restricted, such as private post content or user details. No user interaction is required. Update to a version newer than 7.6.0.2 to resolve this issue.
What an attacker can do
Read sensitive data like private posts or user information without authentication.
Potential impact on your site
Private post content and user data may be exposed to anyone on the internet.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
