The Ajax Load More plugin for WordPress is vulnerable to an authorization flaw that allows authenticated users to perform unauthorized file operations, posing a significant risk of remote code execution.

This vulnerability arises from a lack of proper authorization checks on AJAX actions within the plugin. Any authenticated user, including those with minimal privileges such as subscribers, can leverage these exposed endpoints to upload or delete arbitrary files on the server.

The ability for low-privileged users to upload or remove arbitrary files on the web server is a critical security failure. An attacker could upload a malicious script to achieve remote code execution, leading to complete site compromise, data exfiltration, or the defacement of the web application. Given the CVSS score of 8.8, this flaw represents a high-severity risk that could result in substantial operational downtime and reputational damage.

Immediate Action: Update the Ajax Load More plugin to version 2.8.1.2 or later immediately to incorporate the required authorization checks.

Proactive Monitoring: Review web server access logs for unusual POST requests directed toward the plugin's AJAX endpoints, specifically looking for unexpected file upload activity from low-privileged user accounts.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized access to the plugin's AJAX interface or restrict file uploads to verified administrative accounts until the patch is applied.

Public Exploit Available: Yes, a Metasploit module is available for this vulnerability.

This vulnerability presents a severe risk due to the potential for arbitrary file manipulation and subsequent remote code execution. Security teams must prioritize updating the Ajax Load More plugin across all WordPress instances immediately. If an update is not immediately feasible, restrict access to the affected functionality or deactivate the plugin to prevent unauthorized exploitation.