CVE-2014-2674: AJAX-Pagination Project AJAX-Pagination

High severity, CVSS 7.5. EPSS: 15.2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Ajax Pagination (twitter Style) plugin 1.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the loop parameter in an ajax_navigation action to wp-admin/admin-ajax.php.

Affected products

• AJAX-Pagination Project AJAX-Pagination: version 1.1 only

Published 2018-03-19. Last modified 2026-06-17.