amp_for_wp_accelerated_mobile_pages vulnerabilities
CVEs whose affected-version data names the amp_for_wp_accelerated_mobile_pages package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-97019High· 7.2AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute in all versions up to, and including, 1.1.17 due to insufficient input sanitization and outp…
▾ Twilightmohammed_kaludi · AMP for WP – Accelerated Mobile PagesEPSS 0.24%via CVEORG
CVE-2026-83591High· 7.2The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Regex Transformation in all versions up to, and including, 1.1.16 due to insufficient input sanitization …
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Regex Transformation in all versions up to, and including, 1.1.16 due to insufficient input sanitization …
▾ Twilightmohammed_kaludi · AMP for WP – Accelerated Mobile PagesEPSS 0.29%via NVD