AM
Product
Accelerated Mobile Pages
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 6Low 0
Watch
Add Accelerated Mobile Pages to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-9598 | 8.8 | Oct 25 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.99.1 Affected: before 1.0.99.2 |
| CVE-2024-1043 | 6.5 | Feb 29 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'amppb_remove_saved_layout_data'… Affected: before 1.0.93.2 |
| CVE-2024-11254 | 6.1 | Dec 18 | AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting Affected: before 1.1.2 |
| CVE-2024-0587 | 6.1 | Jan 23 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'disqus_name' parameter in all versions up to, and… Affected: through 1.0.92.1 |
| CVE-2024-6896 | 5.4 | Jul 24 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.96.1 due… Affected: before 1.0.97 |
| CVE-2021-23209 | 4.8 | Mar 18 | Multiple Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) vulnerabilities discovered in AMP for WP – Accelerated Mobile Pages WordPress plugin (versions <=… Affected: through 1.0.77.32 |
| CVE-2021-23150 | 4.8 | Mar 18 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability discovered in AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 versions Affected: through 1.0.77.31 |
Showing 7
