Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: mohammed_kaludi Component: Accelerated Mobile Pages Clear all filters
TI-2024-10426 CVE-2024-11254 · GHSA-qqhj-pxjj-rvxg

AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting

Priority LOW 27

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the disqus_name parameter in all versions up to, and including, 1.1.1 due to insufficient input validatio…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00285 Published 2024-12-18 No fix listed CWE-79
TI-2024-06396 CVE-2024-6896 · GHSA-mf2h-m732-8m29

Cross-site scripting in mohammed_kaludi AMP for WP – Accelerated Mobile Pages

Priority LOW 28

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.96.1 due to insufficient input sanitization and o…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00329 Published 2024-07-24 No fix listed CWE-79
TI-2024-00965 CVE-2024-1043 · GHSA-x6f4-gvp6-p33w

AMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_data

Priority LOW 30

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'amppb_remove_saved_layout_data' function in all versions up to, and incl…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00654 Published 2024-02-20 No fix listed CWE-285
TI-2024-00543 CVE-2024-0587 · GHSA-8p37-w86w-447q

Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting

Priority LOW 28

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'disqus_name' parameter in all versions up to, and including, 1.0.92.1 due to insufficient input sani…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00443 Published 2024-01-23 No fix listed CWE-79