Vulnerabilities > Connekthq > High

DATE CVE VULNERABILITY TITLE RISK
2023-11-22 CVE-2023-27451 Unspecified vulnerability in Connekthq Instant Images
Server-Side Request Forgery (SSRF) vulnerability in Darren Cooney Instant Images plugin <= 5.1.0.2 versions.
network
low complexity
connekthq
8.8
2022-09-06 CVE-2022-2433 Deserialization of Untrusted Data vulnerability in Connekthq Ajax Load More
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'alm_repeaters_export' parameter in versions up to, and including 5.5.3.
network
low complexity
connekthq CWE-502
8.8
2021-03-18 CVE-2021-24140 SQL Injection vulnerability in Connekthq Ajax Load More
Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test.
network
low complexity
connekthq CWE-89
7.2