Ajax Load More: REST API Security & Risk Analysis

wordpress.org/plugins/ajax-load-more-rest-api

An Ajax Load More extension that adds compatibility for the WP REST API.

100 active installs v1.2.6 PHP + WP 4.0+ Updated Jun 5, 2025
ajax-load-moreendpointsinfinite-scrolllazy-loadrest-api
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Ajax Load More: REST API Safe to Use in 2026?

Generally Safe

Score 100/100

Ajax Load More: REST API has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago
Risk Assessment

The "ajax-load-more-rest-api" v1.2.6 plugin exhibits a strong security posture based on the provided static analysis results. The absence of identified AJAX handlers, REST API routes, shortcodes, and cron events with unprotected entry points significantly limits the potential attack surface. Furthermore, the code demonstrates good practices by not utilizing dangerous functions, performing file operations, or making external HTTP requests. The exclusive use of prepared statements for SQL queries is also a positive indicator.

Key Concerns

  • Output escaping could be improved
  • No nonce checks on entry points
  • No capability checks on entry points
Vulnerabilities
None known

Ajax Load More: REST API Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Ajax Load More: REST API Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
4 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

57% escaped7 total outputs
Attack Surface

Ajax Load More: REST API Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 7
actionadmin_noticesajax-load-more-rest-api.php:45
actionalm_rest_api_installedajax-load-more-rest-api.php:58
actionalm_rest_api_settingsajax-load-more-rest-api.php:59
actionwp_enqueue_scriptsajax-load-more-rest-api.php:60
actionalm_get_rest_api_templateajax-load-more-rest-api.php:61
filteralm_rest_api_shortcodeajax-load-more-rest-api.php:62
actionrest_api_initendpoints.php:18
Maintenance & Trust

Ajax Load More: REST API Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJun 5, 2025
PHP min version
Downloads8K

Community Trust

Rating0/100
Number of ratings0
Active installs100
Developer Profile

Ajax Load More: REST API Developer Profile

Darren Cooney

9 plugins · 47K total installs

78
trust score
Avg Security Score
98/100
Avg Patch Time
629 days
View full developer profile
Detection Fingerprints

How We Detect Ajax Load More: REST API

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Script Paths
/wp-content/plugins/ajax-load-more-rest-api/js/alm-rest-api.js
Version Parameters
ajax-load-more-rest-api/js/alm-rest-api.js?ver=

HTML / DOM Fingerprints

Data Attributes
data-restapidata-restapi-base-urldata-restapi-namespacedata-restapi-endpointdata-restapi-template-iddata-restapi-debug
REST Endpoints
/wp-json/ajaxloadmore/v1/restapi
Shortcode Output
[alm_restapi][restapi_base][restapi_namespace][restapi_endpoint]
FAQ

Frequently Asked Questions about Ajax Load More: REST API