WordPress Infinite Scroll – Ajax Load More, CVE-2025-15525
- CVE, Research URL
- Application
- Published on
- Jan 31, 2026
- Research Description
- The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parse_custom_args() function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose the titles and excerpts of private, draft, pending, scheduled, and trashed posts.
- Affected versions
-
max 7.8.2.
- Status
-
vulnerable