CVE-2015-10140

The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber, to upload and delete arbitrary files.
CVSS

No CVSS.

Configurations

No configuration.

History

22 Jul 2025, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-22 14:15

Updated : 2025-07-22 14:15


NVD link : CVE-2015-10140

Mitre link : CVE-2015-10140


JSON object : View

Products Affected

No product.

CWE

No CWE.