EIP-2026-113548
PRE-CVEWordPress Plugin Ajax Load More 5.3.1 - '#1' Authenticated SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113548. PoCs published by Nguyen Khang.
AI-analyzed exploit summary This is a functional proof-of-concept for an authenticated SQL injection vulnerability in the WordPress plugin Ajax Load More (version <= 5.3.1). The exploit demonstrates how an attacker can inject malicious SQL payloads via the 'repeater' parameter in an authenticated POST request to admin-ajax.php.
Description
WordPress Plugin Ajax Load More 5.3.1 - '#1' Authenticated SQL Injection
Exploits (1)
This is a functional proof-of-concept for an authenticated SQL injection vulnerability in the WordPress plugin Ajax Load More (version <= 5.3.1). The exploit demonstrates how an attacker can inject malicious SQL payloads via the 'repeater' parameter in an authenticated POST request to admin-ajax.php.