AM
Vendor
Ampforwp
7
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-11254 | AM Accelerated Mobile Pages Ampforwp | 6.1 | Dec 18 | AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting |
| CVE-2024-9598 | AM Accelerated Mobile Pages Ampforwp | 8.8 | Oct 25 | AMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege Escalation |
| CVE-2024-6896 | AM Accelerated Mobile Pages Ampforwp | 5.4 | Jul 24 | AMP for WP – Accelerated Mobile Pages <= 1.0.96.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload |
| CVE-2024-1043 | AM Accelerated Mobile Pages Ampforwp | 6.5 | Feb 20 | AMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_data |
| CVE-2024-0587 | AM Accelerated Mobile Pages Ampforwp | 6.1 | Jan 23 | Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting |
| CVE-2021-23209 | AM Accelerated Mobile Pages Ampforwp | 4.8 | Mar 18 | WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.32 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities |
| CVE-2021-23150 | AM Accelerated Mobile Pages Ampforwp | 4.8 | Mar 18 | WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 - Auth. Stored Cross-Site Scripting (XSS) vulnerability |
