What’s Vulnerable › Products
mohammed_kaludi AMP for WP – Accelerated Mobile Pages vulnerabilities
12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.
Check whether your mohammed_kaludi AMP for WP – Accelerated Mobile Pages version is affected
Latest mohammed_kaludi AMP for WP – Accelerated Mobile Pages vulnerabilities
- CVE-2026-97019 — AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute (CVSS 7.2)
- CVE-2026-83591 — AMP for WP <= 1.1.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content Regex Transformation (CVSS 7.2)
- CVE-2026-6101 — AMP for WP <= 1.1.12 - Authenticated (Author+) Arbitrary File Write via Role-Based Access Configuration with Local Font Upload (CVSS 7.5)
- CVE-2026-0627 — AMP for WP <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload (CVSS 6.4)
- CVE-2025-14468 — AMP for WP – Accelerated Mobile Pages <= 1.1.9 - Cross-Site Request Forgery to Comment Submission (CVSS 4.3)
- CVE-2024-11254 — AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2024-9598 — AMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege Escalation (CVSS 8.8)
- CVE-2024-6896 — AMP for WP – Accelerated Mobile Pages <= 1.0.96.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload (CVSS 5.4)
- CVE-2024-1043 — AMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_data (CVSS 6.5)
- CVE-2024-0587 — Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting (CVSS 6.1)
- CVE-2021-23209 — WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.32 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities (CVSS 4.8)
- CVE-2021-23150 — WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 - Auth. Stored Cross-Site Scripting (XSS) vulnerability (CVSS 4.8)