Description
WordPress Ajax Load More 插件是一款用于实现无限滚动加载功能的WordPress插件，支持通过AJAX异步加载文章、页面、自定义文章类型等内容，广泛应用于各类WordPress主题和页面构建中。该插件的 /wp-admin/admin-ajax.php 接口存在信息泄露漏洞，攻击者可通过构造特定的请求参数访问未公开发布的文章（草稿、私密、待审核等状态），获取潜在的敏感信息。
WordPress Ajax Load More 插件 /wp-admin/admin-ajax.php 信息泄露漏洞（CVE-2025-59582）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-59582
https://pentest-tools.com/vulnerabilities-exploits/ajax-load-more-761-unauthenticated-sensitive-information-exposure_29242
https://github.com/advisories/GHSA-frxp-hx27-j39r
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ajax-load-more
https://app.opencve.io/cve/CVE-2025-59582
https://cve.akaoma.com/cve-2025-59582