AM
Vendor
Ampforwp
7
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-11254 | AM Accelerated Mobile Pages Ampforwp | 6.1 | Dec 18 | AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting |
| CVE-2024-9598 | AM Accelerated Mobile Pages Ampforwp | 8.8 | Oct 25 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.99.1 |
| CVE-2024-6896 | AM Accelerated Mobile Pages Ampforwp | 5.4 | Jul 24 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.96.1 due… |
| CVE-2024-1043 | AM Accelerated Mobile Pages Ampforwp | 6.5 | Feb 29 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'amppb_remove_saved_layout_data'… |
| CVE-2024-0587 | AM Accelerated Mobile Pages Ampforwp | 6.1 | Jan 23 | The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'disqus_name' parameter in all versions up to, and… |
| CVE-2021-23209 | AM Accelerated Mobile Pages Ampforwp | 4.8 | Mar 18 | Multiple Authenticated (admin user role) Persistent Cross-Site Scripting (XSS) vulnerabilities discovered in AMP for WP – Accelerated Mobile Pages WordPress plugin (versions <=… |
| CVE-2021-23150 | AM Accelerated Mobile Pages Ampforwp | 4.8 | Mar 18 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability discovered in AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 versions |
