Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in AMP for WP – Accelerated Mobile Pages 1.0.96.1

  • Severity: medium-risk
  • Status: Fixed
  • Publication: July 23, 2024

The AMP for WP plugin for WordPress has a security issue that allows attackers to inject harmful code into web pages. This can happen when uploading SVG files and can affect all versions up to 1.0.96.1. This vulnerability is due to a lack of proper input sanitization and output escaping. As a result, attackers with Author-level access or higher can exploit this and potentially harm users who access the affected SVG file.

Detected in:

AMP for WP – Accelerated Mobile Pages fixed vulnerable versions: >= * <= 1.0.96.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.