High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-09-06	CVE-2022-2433	Deserialization of Untrusted Data vulnerability in Connekthq Ajax Load More The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'alm_repeaters_export' parameter in versions up to, and including 5.5.3. network low complexity connekthq CWE-502	8.8
2021-03-18	CVE-2021-24140	SQL Injection vulnerability in Connekthq Ajax Load More Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test. network low complexity connekthq CWE-89	7.2