CVE-2021-24140: Connekthq AJAX Load More

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test.

Affected products

• Connekthq AJAX Load More: before 5.3.2 (fixed in 5.3.2)

Published 2021-03-18. Last modified 2026-06-17.