Plugin icon

AMP for WP – Accelerated Mobile Pages

accelerated-mobile-pages

Vulnerabilities:

14

Last Updated:

March 2, 2026

Active Installs:

90000

Published
Title
Fixed in
CVSS
Published
2026-01-08
Title
AMP for WP < 1.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload
Fixed in
Fixed in 1.1.11
CVSS
6.4 (medium)
Published
2026-01-06
Title
AMP for WP – Accelerated Mobile Pages < 1.1.10 - Cross-Site Request Forgery to Comment Submission
Fixed in
Fixed in 1.1.10
CVSS
4.3 (medium)
Published
2024-12-17
Title
AMP for WP – Accelerated Mobile Pages < 1.1.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.1.2
CVSS
6.1 (medium)
Published
2024-10-24
Title
AMP for WP – Accelerated Mobile Pages < 1.0.99.2 - Cross-Site Request Forgery to Privilege Escalation
Fixed in
Fixed in 1.0.99.2
CVSS
8.8 (high)
Published
2024-08-07
Title
AMP for WP < 1.0.97 - Missing Authorization
Fixed in
Fixed in 1.0.97
CVSS
4.3 (medium)
Published
2024-07-23
Title
AMP for WP – Accelerated Mobile Pages < 1.0.97 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Fixed in
Fixed in 1.0.97
CVSS
6.4 (medium)
Published
2024-02-06
Title
AMP for WP < 1.0.93.2 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_data
Fixed in
Fixed in 1.0.93.2
CVSS
6.5 (medium)
Published
2024-01-22
Title
Accelerated Mobile Pages < 1.0.93 - Unautenticated Reflected Cross-Site Scripting
Fixed in
Fixed in 1.0.93
CVSS
6.1 (medium)
Published
2023-12-18
Title
AMP for WP – Accelerated Mobile Pages < 1.0.92.1 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode
Fixed in
Fixed in 1.0.92.1
CVSS
6.4 (medium)
Published
2023-11-28
Title
Accelerated Mobile Pages < 1.0.89 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Fixed in
Fixed in 1.0.89
CVSS
6.4 (medium)
Published
2021-12-15
Title
AMP for WP < 1.0.77.33 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.77.33
CVSS
3.4 (low)
Published
2021-12-11
Title
AMP for WP < 1.0.77.32 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.77.32
CVSS
3.4 (low)
Published
2018-11-20
Title
Accelerated Mobile Pages < 0.9.97.21 - Stored XSS
Fixed in
Fixed in 0.9.97.21
CVSS
5.4 (medium)
Published
2018-10-20
Title
Accelerated Mobile Pages <= 0.9.97.19 - Multiple Unauthenticated Vulnerabilities
Fixed in
Fixed in 0.9.97.20
CVSS
n/a