MO
Vendor
mohammed_kaludi
13
CVEs
0
On KEV
1
New 30D
Products
AF8.8
AMP for WP – Accelerated Mobile Pages
mohammed_kaludi
11 CVEs0 on KEV1 new
CW7.1
Core Web Vitals & PageSpeed Booster
Mohammed Kaludi
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-97019 New | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 7.2 | Oct 28 | AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute |
| CVE-2026-83591 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 7.2 | Sep 25 | AMP for WP <= 1.1.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content Regex Transformation |
| CVE-2026-95528 | CW Core Web Vitals & PageSpeed Booster Mohammed Kaludi | 7.1 | Sep 23 | WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.31 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-6101 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 7.5 | Jul 7 | AMP for WP <= 1.1.12 - Authenticated (Author+) Arbitrary File Write via Role-Based Access Configuration with Local Font Upload |
| CVE-2026-0627 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 6.4 | Jan 9 | AMP for WP <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload |
| CVE-2025-14468 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 4.3 | Jan 7 | AMP for WP – Accelerated Mobile Pages <= 1.1.9 - Cross-Site Request Forgery to Comment Submission |
| CVE-2025-62144 | CW Core Web Vitals & PageSpeed Booster Mohammed Kaludi | 5.4 | Dec 31 | WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.28 - Broken Access Control vulnerability |
| CVE-2024-11254 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 6.1 | Dec 18 | AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting |
| CVE-2024-9598 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 8.8 | Oct 25 | AMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege Escalation |
| CVE-2024-6896 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 5.4 | Jul 24 | AMP for WP – Accelerated Mobile Pages <= 1.0.96.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload |
| CVE-2024-1043 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 6.5 | Feb 20 | AMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_data |
| CVE-2024-0587 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 6.1 | Jan 23 | Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting |
| CVE-2023-6782 | AF AMP for WP – Accelerated Mobile Pages mohammed_kaludi | 5.4 | Jan 11 | AMP for WP – Accelerated Mobile Pages <= 1.0.92 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode |