CVE-2026-61991

WordPress AjaxLoadMore Cache plugin <= 3.1.1 - Remote Code Execution (RCE) vulnerability

CRITICAL 10.0

CVSS 3.1Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HPublished: 2026-10-29 15:24 UTCUpdated: 2026-10-30 18:50 UTCAssigner: Patchstack

Description

Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.

Ajax Load More AjaxLoadMore Cache