accelerated mobile pages vulnerabilities and fixes

Recent CVEs affecting accelerated mobile pages, with upgrade or downgrade steps. 5 tracked.

Also searched as: acceleratedmobilepages.

accelerated mobile pages has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-12-18. Highest priority: CVE-2024-9598 (score 36/100).

• CVE-2024-9598 HIGH 8.8 UPGRADE The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in
• CVE-2024-6896 MEDIUM 6.4 UPGRADE The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting vi
• CVE-2024-1043 MEDIUM 6.5 UPGRADE The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to unauthorized loss of data due
• CVE-2024-11254 MEDIUM 6.1 UPGRADE The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting
• CVE-2024-0587 MEDIUM 6.1 UPGRADE The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting

FAQ

How do I fix accelerated mobile pages vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is accelerated mobile pages being exploited right now?

None of the tracked accelerated mobile pages CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which accelerated mobile pages CVE should I patch first?

CVE-2024-9598 currently ranks highest (36/100): The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in .

RSS feed for accelerated mobile pages · ← Back to latest CVEs