Ultimate Infinite Scroll, AJAX Lazy load Plugin for Posts & Woocommerce Security & Risk Analysis

wordpress.org/plugins/ultimate-infinite-scroll

Ultimate Infinite Lazy Load, Ajax Scroll Solution for WordPress Blog posts and WooCommerce products

400 active installs v1.0.5 PHP + WP 5.2+ Updated Mar 5, 2025
ajax-paginationinfinite-scrolllazy-loadload-morescroll
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Ultimate Infinite Scroll, AJAX Lazy load Plugin for Posts & Woocommerce Safe to Use in 2026?

Generally Safe

Score 92/100

Ultimate Infinite Scroll, AJAX Lazy load Plugin for Posts & Woocommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "ultimate-infinite-scroll" plugin v1.0.5 exhibits a strong security posture based on the static analysis and vulnerability history. The complete absence of known CVEs and the diligent use of prepared statements for all SQL queries are particularly positive indicators. Furthermore, the plugin implements a substantial number of nonce checks and capability checks, which are crucial for securing its AJAX endpoints against unauthorized access and privilege escalation. The limited attack surface, consisting solely of AJAX handlers, and the fact that none of these appear to be directly exposed without authentication are commendable.

Key Concerns

  • Output escaping is only 68% proper
  • Bundled library Freemius v1.0 may be outdated
Vulnerabilities
None known

Ultimate Infinite Scroll, AJAX Lazy load Plugin for Posts & Woocommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Ultimate Infinite Scroll, AJAX Lazy load Plugin for Posts & Woocommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
210
456 escaped
Nonce Checks
12
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius1.0

SQL Query Safety

100% prepared2 total queries

Output Escaping

68% escaped666 total outputs
Data Flows
All sanitized

Data Flow Analysis

3 flows
csf_export (admin\functions\actions.php:62)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Ultimate Infinite Scroll, AJAX Lazy load Plugin for Posts & Woocommerce Attack Surface

Entry Points5
Unprotected0

AJAX Handlers 5

authwp_ajax_csf-get-iconsadmin\functions\actions.php:50
authwp_ajax_csf-exportadmin\functions\actions.php:87
authwp_ajax_csf-importadmin\functions\actions.php:123
authwp_ajax_csf-resetadmin\functions\actions.php:150
authwp_ajax_csf-chosenadmin\functions\actions.php:189
WordPress Hooks 48
actionwp_enqueue_scriptsadmin\classes\abstract.class.php:20
actionadmin_menuadmin\classes\admin-options.class.php:105
actionadmin_bar_menuadmin\classes\admin-options.class.php:106
actionnetwork_admin_menuadmin\classes\admin-options.class.php:110
filteradmin_footer_textadmin\classes\admin-options.class.php:487
actionadd_meta_boxes_commentadmin\classes\comment-options.class.php:37
actionedit_commentadmin\classes\comment-options.class.php:38
actioncustomize_registeradmin\classes\customize-options.class.php:43
actioncustomize_save_afteradmin\classes\customize-options.class.php:44
actionwp_enqueue_scriptsadmin\classes\customize-options.class.php:48
actionadd_meta_boxesadmin\classes\metabox-options.class.php:49
actionsave_postadmin\classes\metabox-options.class.php:50
actionedit_attachmentadmin\classes\metabox-options.class.php:51
actionwp_nav_menu_item_custom_fieldsadmin\classes\nav-menu-options.class.php:30
actionwp_update_nav_menu_itemadmin\classes\nav-menu-options.class.php:31
filterwp_edit_nav_menu_walkeradmin\classes\nav-menu-options.class.php:33
actionadmin_initadmin\classes\profile-options.class.php:30
actionshow_user_profileadmin\classes\profile-options.class.php:42
actionedit_user_profileadmin\classes\profile-options.class.php:43
actionpersonal_options_updateadmin\classes\profile-options.class.php:45
actionedit_user_profile_updateadmin\classes\profile-options.class.php:46
actionafter_setup_themeadmin\classes\setup.class.php:53
actioninitadmin\classes\setup.class.php:54
actionswitch_themeadmin\classes\setup.class.php:55
actionadmin_enqueue_scriptsadmin\classes\setup.class.php:56
actionwp_enqueue_scriptsadmin\classes\setup.class.php:57
actionwp_headadmin\classes\setup.class.php:58
filteradmin_body_classadmin\classes\setup.class.php:59
actionadmin_footeradmin\classes\shortcode-options.class.php:47
actioncustomize_controls_print_footer_scriptsadmin\classes\shortcode-options.class.php:48
actionelementor/editor/before_enqueue_scriptsadmin\classes\shortcode-options.class.php:57
actionelementor/editor/footeradmin\classes\shortcode-options.class.php:58
actionelementor/editor/footeradmin\classes\shortcode-options.class.php:59
actionenqueue_block_editor_assetsadmin\classes\shortcode-options.class.php:299
actionmedia_buttonsadmin\classes\shortcode-options.class.php:303
actionadmin_initadmin\classes\taxonomy-options.class.php:41
actionadmin_footeradmin\fields\icon\icon.php:41
actioncustomize_controls_print_footer_scriptsadmin\fields\icon\icon.php:42
actionadmin_print_footer_scriptsadmin\fields\link\link.php:65
actionprint_default_editor_scriptsadmin\fields\wp_editor\wp_editor.php:62
actionwoocommerce_before_shop_loopincludes\helpers.php:78
actionwoocommerce_paginationincludes\helpers.php:81
actionwoocommerce_paginationincludes\helpers.php:82
actionplugins_loadedincludes\helpers.php:83
actionwp_enqueue_scriptsincludes\helpers.php:85
actionwp_enqueue_scriptsincludes\helpers.php:86
actionwp_enqueue_scriptsincludes\helpers.php:87
filterloop_shop_per_pageincludes\helpers.php:199
Maintenance & Trust

Ultimate Infinite Scroll, AJAX Lazy load Plugin for Posts & Woocommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedMar 5, 2025
PHP min version
Downloads7K

Community Trust

Rating100/100
Number of ratings4
Active installs400
Developer Profile

Ultimate Infinite Scroll, AJAX Lazy load Plugin for Posts & Woocommerce Developer Profile

wpunicorn

5 plugins · 420 total installs

92
trust score
Avg Security Score
97/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Ultimate Infinite Scroll, AJAX Lazy load Plugin for Posts & Woocommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ultimate-infinite-scroll/freemius/start.php/wp-content/plugins/ultimate-infinite-scroll/admin/classes/setup.class.php/wp-content/plugins/ultimate-infinite-scroll/admin/options/admin-options.php/wp-content/plugins/ultimate-infinite-scroll/includes/helpers.php/wp-content/plugins/ultimate-infinite-scroll/freemius/start.php

HTML / DOM Fingerprints

CSS Classes
uis_fs
JS Globals
uis_fs
FAQ

Frequently Asked Questions about Ultimate Infinite Scroll, AJAX Lazy load Plugin for Posts & Woocommerce