A critical SQL injection vulnerability has been identified in the Ajax Load More WordPress plugin before version 8.0.1. The plugin fails to properly sanitize and escape a parameter before incorporating it into a SQL query. This flaw allows unauthenticated attackers to perform time-based blind SQL injection attacks. Exploitation of this vulnerability can result in unauthorized extraction of sensitive data from the underlying database. No authentication is required to exploit this vulnerability, significantly increasing its risk profile. The issue has been addressed in version 8.0.1 of the plugin. WordPress site administrators using this plugin are strongly advised to update immediately.