CVE-2022-2945: Connekthq AJAX Load More

Low severity, CVSS 2.7. EPSS: 1.7% chance of exploitation in the next 30 days.

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.5.3 via the 'type' parameter found in the alm_get_layout() function. This makes it possible for authenticated attackers, with administrative permissions, to read the contents of arbitrary files on the server, which can contain sensitive information.

Affected products

• Connekthq AJAX Load More: up to and including 5.5.3

Published 2022-09-06. Last modified 2026-06-17.