6.4
Moyenne
CVE-2026-0627 The AMP for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up…
Description
The AMP for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up to, and including, 1.1.10. This is due to insufficient sanitization of SVG file content that only removes `<script>` tags while allowing other XSS vectors such as event handlers (onload, onerror, onmouseover), foreignObject elements, and SVG animation attributes. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts via malicious SVG file uploads that will execute whenever a user views the uploaded file.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AMP for WP – Accelerated Mobile Pages 1.1 | premières → 1.1.10 | Pas de correctif indiqué |
Autres CVE de AMP for WP – Accelerated Mobile Pages
Les 12 CVE de AMP for WP – Accelerated Mobile Pages →
CVE-2026-103908
AMP for WP <= 1.1.18 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Author Biographical Info
5.4
Moyenne
CVE-2026-97019
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
7.2
Élevée
CVE-2026-83591
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
7.2
Élevée
CVE-2026-6101
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Arbitrary File Write in versions up to…
7.5
Élevée