Skip to content

Known vulnerabilities in mohammed_kaludi AMP for WP – Accelerated Mobile Pages

Is your version affected?

CVE Summary Score Published
CVE-2026-103908 AMP for WP <= 1.1.18 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Author Biographical Info 5.4 Medium Nov 6, 2026
CVE-2026-97019 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… 7.2 High Oct 28, 2026
CVE-2026-83591 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… 7.2 High Sep 25, 2026
CVE-2026-6101 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Arbitrary File Write in versions up to… 7.5 High Jul 7, 2026
CVE-2026-0627 The AMP for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up… 6.4 Medium Jan 9, 2026
CVE-2025-14468 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions… 4.3 Medium Jan 7, 2026
CVE-2024-11254 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the… 6.1 Medium Dec 18, 2024
CVE-2024-9598 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all… 8.8 High Oct 25, 2024
CVE-2024-6896 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File… 6.4 Medium Jul 24, 2024
CVE-2024-1043 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a… 6.5 Medium Feb 20, 2024
CVE-2024-0587 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the… 6.1 Medium Jan 23, 2024
CVE-2023-6782 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the… 6.4 Medium Jan 11, 2024