Skip to contentMohammed Kaludi Amp For Wp – Accelerated Mobile Pages vulnerabilities
- mohammed kaludi amp for wp – accelerated mobile pagesAMP for WP <= 1.1.18 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Author Biographical InfoCVE-2026-1039085.4 Medium
- mohammed kaludi amp for wp – accelerated mobile pagesAMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode AttributeCVE-2026-970197.2 High
- mohammed kaludi amp for wp – accelerated mobile pagesAMP for WP <= 1.1.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content Regex TransformationCVE-2026-835917.2 High
- mohammed kaludi amp for wp – accelerated mobile pagesAMP for WP <= 1.1.12 - Authenticated (Author+) Arbitrary File Write via Role-Based Access Configuration with Local Font UploadCVE-2026-61017.5 High
- mohammed kaludi amp for wp – accelerated mobile pagesAMP for WP <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File UploadCVE-2026-06276.4 Medium
- mohammed kaludi amp for wp – accelerated mobile pagesAMP for WP – Accelerated Mobile Pages <= 1.1.9 - Cross-Site Request Forgery to Comment SubmissionCVE-2025-144684.3 Medium
- ampforwp accelerated mobile pages, mohammed kaludi amp for wp – accelerated mobile pages +1 moreAMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site ScriptingCVE-2024-112546.1 Medium
- ampforwp accelerated mobile pages, magazine3 amp for wp, mohammed kaludi amp for wp – accelerated mobile pages +2 moreAMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege EscalationCVE-2024-95988.8 High
- ampforwp accelerated mobile pages, mohammed kaludi amp for wp – accelerated mobile pages +1 moreAMP for WP – Accelerated Mobile Pages <= 1.0.96.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-68966.4 Medium
- ampforwp accelerated mobile pages, mohammed kaludi amp for wp – accelerated mobile pages +1 moreAMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_dataCVE-2024-10436.5 Medium
- ampforwp accelerated mobile pages, mohammed kaludi amp for wp – accelerated mobile pages +1 moreAccelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site ScriptingCVE-2024-05876.1 Medium
- magazine3 amp for wp, mohammed kaludi amp for wp – accelerated mobile pages +1 moreAMP for WP – Accelerated Mobile Pages <= 1.0.92 - Authenticated (Contributor+) Cross-Site Scripting via ShortcodeCVE-2023-67826.4 Medium
- ahmed kaludi, mohammed kaludi amp for wp – accelerated mobile pages, magazine3 amp for wp +1 moreWordPress Accelerated Mobile Pages Plugin <= 1.0.88.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-483216.5 Medium