SZB-916c92a56c
EUVD lists unauthenticated RCE in Ajax Load More AjaxLoadMore Cache
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Ajax Load More
- Product
- AjaxLoadMore Cache
- First seen
Summary
The EU Vulnerability Database (EUVD) entry EUVD-2026-112958, relayed in a Mastodon post, describes an unauthenticated remote code execution flaw in AjaxLoadMore Cache versions 3.1.1 and earlier. The entry gives a CVSS v3.1 score of 10.0 and was published 2026-10-29 and updated 2026-10-30.
If you use Ajax Load More
Update AjaxLoadMore Cache to a version later than 3.1.1 immediately.
Disable the plugin if an update is not yet available.
Check the site for unexpected files or admin accounts.
What the sources say 1
· Mastodon: “Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.” Source