Log in Start free

Mohammed Kaludi

Products

ProductCVEsExploitedLatest
AMP for WP – Accelerated Mobile Pages11–Oct 28, 2026
Core Web Vitals & PageSpeed Booster2–Sep 23, 2026

Exploited and recent CVEs

  • CVE-2026-97019 High 7.2 AMP for WP <= 1.1.17 - Unauthenticated Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute 0.2%
  • CVE-2026-83591 High 7.2 AMP for WP <= 1.1.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content Regex Transformation 0.3%
  • CVE-2026-95528 High 7.1 WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.31 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-6101 High 7.5 AMP for WP <= 1.1.12 - Authenticated (Author+) Arbitrary File Write via Role-Based Access Configuration with Local Font Upload 1.0%
  • CVE-2026-0627 Medium 6.4 AMP for WP <= 1.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG File Upload 0.2%
  • CVE-2025-14468 Medium 4.3 AMP for WP – Accelerated Mobile Pages <= 1.1.9 - Cross-Site Request Forgery to Comment Submission 0.2%
  • CVE-2025-62144 Medium 5.4 WordPress Core Web Vitals & PageSpeed Booster plugin <= 1.0.28 - Broken Access Control vulnerability 0.2%
  • CVE-2024-11254 Medium 6.1 AMP for WP – Accelerated Mobile Pages <= 1.1.1 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-9598 High 8.8 AMP for WP – Accelerated Mobile Pages <= 1.0.99.1 - Cross-Site Request Forgery to Privilege Escalation 0.3%
  • CVE-2024-6896 Medium 6.4 AMP for WP – Accelerated Mobile Pages <= 1.0.96.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2024-1043 Medium 6.5 AMP for WP <= 1.0.93.1 - Authenticated(Contributor+) Arbitrary Post Deletion via amppb_remove_saved_layout_data 0.7%
  • CVE-2024-0587 Medium 6.1 Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting 0.4%
  • CVE-2023-6782 Medium 6.4 AMP for WP – Accelerated Mobile Pages <= 1.0.92 - Authenticated (Contributor+) Cross-Site Scripting via Shortcode 0.4%