How many ampforwp accelerated mobile pages CVEs are in CISA KEV?

None of ampforwp accelerated mobile pages's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of ampforwp accelerated mobile pages are affected?

11 distinct ampforwp accelerated mobile pages versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in ampforwp accelerated mobile pages CVEs?

ampforwp accelerated mobile pages's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-285 (Improper Authorization), CWE-352 (Cross-Site Request Forgery (CSRF)).

What is the average severity of ampforwp accelerated mobile pages CVEs?

The average CVSS base score across ampforwp accelerated mobile pages's scored CVEs is 6.2.

RadicalNotion.AI

Log in Start free

ampforwp

7 CVEs

ampforwp accelerated mobile pages Vulnerabilities

Name: ampforwp accelerated mobile pages vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for accelerated mobile pages by ampforwp.

7

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.2

Avg CVSS

2022–2024

Last updated December 18, 2024

Overview

ampforwp accelerated mobile pages has 7 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting ampforwp accelerated mobile pages, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of ampforwp accelerated mobile pages's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ampforwp accelerated mobile pages's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No ampforwp accelerated mobile pages CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every ampforwp accelerated mobile pages version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.0.93.21 CVE
< 1.0.971 CVE
< 1.0.99.21 CVE
< 1.1.21 CVE
<= 1.0.77.311 CVE
<= 1.0.77.321 CVE
<= 1.0.92.11 CVE

Fixed in

1.0.93.21 CVE
1.0.971 CVE
1.0.99.21 CVE
1.1.21 CVE

Find a version

7 CVEs

Sort

AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting
CVE-2024-11254
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.3% (20th pct)2024-12-18
AMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege Escalation
CVE-2024-9598
Patch
CWE-352
High · CVSS 8.8
EPSS 0.3% (19th pct)2024-10-25
AMP for WP – Accelerated Mobile Pages <= 1.0.96.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-6896
Patch
CWE-79
Medium · CVSS 6.4
EPSS 0.3% (25th pct)2024-07-24
AMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_data
CVE-2024-1043
Patch
CWE-285
Medium · CVSS 6.5
EPSS 0.7% (49th pct)2024-02-20
Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting
CVE-2024-0587
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.4% (37th pct)2024-01-23
WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.32 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
CVE-2021-23209
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.6% (44th pct)2022-03-18
WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
CVE-2021-23150
Patch
CWE-79
Medium · CVSS 4.8
EPSS 0.6% (44th pct)2022-03-18

Common weakness types

The CWE weakness categories most often found in ampforwp accelerated mobile pages CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many ampforwp accelerated mobile pages CVEs were published each year.

2022

2

2024

5

Other ampforwp products

Browse vulnerabilities for other products by ampforwp.

All ampforwp vulnerabilities

Frequently asked questions

Common questions about ampforwp accelerated mobile pages vulnerabilities.

How many CVEs does ampforwp accelerated mobile pages have?: ampforwp accelerated mobile pages has 7 published CVE records since 2022.
How many ampforwp accelerated mobile pages CVEs are in CISA KEV?: None of ampforwp accelerated mobile pages's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for ampforwp accelerated mobile pages vulnerabilities?: No ampforwp accelerated mobile pages CVEs currently have a tracked public exploit in this dataset.
Which versions of ampforwp accelerated mobile pages are affected?: 11 distinct ampforwp accelerated mobile pages versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in ampforwp accelerated mobile pages CVEs?: ampforwp accelerated mobile pages's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-285 (Improper Authorization), CWE-352 (Cross-Site Request Forgery (CSRF)).
What is the average severity of ampforwp accelerated mobile pages CVEs?: The average CVSS base score across ampforwp accelerated mobile pages's scored CVEs is 6.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ampforwp accelerated mobile pages vulnerabilities

Monitor new ampforwp accelerated mobile pages vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing