MO
Vendor
mohammed_kaludi
8
CVEs
0
On KEV
1
New 30D
Products
AF7.5
AMP for WP – Accelerated Mobile Pages
mohammed_kaludi
6 CVEs0 on KEV1 new
CW7.1
Core Web Vitals & PageSpeed Booster
Mohammed Kaludi
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-97019 New | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 7.2 | Oct 28 | AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute |
| CVE-2026-83591 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 7.2 | Sep 25 | AMP for WP <= 1.1.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content Regex Transformation |
| CVE-2026-95528 | CW Core Web Vitals & PageSpeed Booster Mohammed Kaludi | 7.1 | Sep 23 | WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.31 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-6101 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 7.5 | Jul 7 | AMP for WP <= 1.1.12 - Authenticated (Author+) Arbitrary File Write via Role-Based Access Configuration with Local Font Upload |
| CVE-2026-0627 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 6.4 | Jan 9 | AMP for WP <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload |
| CVE-2025-14468 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 4.3 | Jan 7 | AMP for WP – Accelerated Mobile Pages <= 1.1.9 - Cross-Site Request Forgery to Comment Submission |
| CVE-2025-62144 | CW Core Web Vitals & PageSpeed Booster Mohammed Kaludi | 5.4 | Dec 31 | WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.28 - Broken Access Control vulnerability |
| CVE-2024-11254 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 6.1 | Dec 18 | AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting |