Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: sbthemes Clear all filters
TI-2025-10995 CVE-2025-11993 · GHSA-88pw-x8mv-5vj5

WooCommerce Infinite Scroll and Ajax Pagination <= 1.8 - Authenticated (Subscriber+) PHP Object Injection

Priority MEDIUM 40

The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8 via the 'settings' parameter in the 'import_settings' function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00378 Published 2026-05-29 No fix listed CWE-502
TI-2026-21508 CVE-2026-27045 · GHSA-5mg7-jhw3-8jvg

WordPress WooCommerce Infinite Scroll plugin <= 1.6.2 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in sbthemes WooCommerce Infinite Scroll sb-woocommerce-infinite-scroll allows Object Injection.This issue affects WooCommerce Infinite Scroll: from n/a through <= 1.6.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00357 Published 2026-03-25 No fix listed CWE-502