Mohammed Kaludi vulnerabilities
We track 4 vulnerabilities in Mohammed Kaludi products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
Latest Mohammed Kaludi vulnerabilities
- 7.2 High severity
AMP for WP – Accelerated Mobile Pages: Improper Neutralization of Input During Web Page Generation
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'headline-*' Shortcode Attribute in all versions up to, and including, 1.1.17 due to insufficient input sanitization and output escaping. This makes
- 7.2 High severity
AMP for WP – Accelerated Mobile Pages: Improper Neutralization of Input During Web Page Generation
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Regex Transformation in all versions up to, and including, 1.1.16 due to insufficient input sanitization and output escaping. Th
- 7.5 High severity
AMP for WP – Accelerated Mobile Pages: External Control of File Name or Path
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Arbitrary File Write in versions up to and including 1.1.12. This is due to unsafe ZIP file extraction in the ampforwp_save_local_font() function combined with inadequate cleanup t
- 8.8 High severity
AMP for WP – Accelerated Mobile Pages: Cross-Site Request Forgery
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.99.1. This is due to missing or incorrect nonce validation on the 'proxy' function. This makes it possible for