WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in AMP for WP – Accelerated Mobile Pages

AMP for WP is the most recommended AMP plugin by the community. Automatically add Accelerated Mobile Pages (Google AMP Project) functionality on your …

14Reported vulnerabilities
8.8Highest CVSS score
1.1.15Latest version
80,000+Active installs

What to do now

Update AMP for WP – Accelerated Mobile Pages to 1.1.13 or later. 14 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 24, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2018-20838 Medium 5.4 1.1% Before 0.9.97.21 0.9.97.21 May 13, 2019
CVE-2024-9598 High 8.8 0.3% Before 1.0.99.2 1.0.99.2 October 25, 2024
CVE-2026-6101 High 7.5 1.0% 0 to 1.1.12 (inclusive) 1.1.13 July 7, 2026
CVE-2024-1043 Medium 6.5 0.7% Before 1.0.93.2 1.0.93.2 February 29, 2024
CVE-2023-48321 Medium 6.4 0.4% 1.0.88.1 and earlier 1.0.89 November 28, 2023
CVE-2026-0627 Medium 6.4 0.2% 0 to 1.1.10 (inclusive) 1.1.11 January 9, 2026
WF-9ea2964f-9e3a-450b-9724-5a520c73d306 Medium 6.3 — 0.9.97.19 and earlier 0.9.97.20 October 20, 2018
CVE-2024-11254 Medium 6.1 0.3% Before 1.1.2 1.1.2 December 18, 2024
CVE-2024-0587 Medium 6.1 0.4% 1.0.92.1 and earlier 1.0.93 January 23, 2024
CVE-2021-23150 Medium 5.5 0.6% 1.0.77.31 and earlier 1.0.77.32 December 11, 2021
CVE-2024-6896 Medium 5.4 0.3% Before 1.0.97 1.0.97 July 24, 2024
CVE-2021-23209 Medium 4.8 0.6% 1.0.77.32 and earlier 1.0.77.33 March 18, 2022
CVE-2025-14468 Medium 4.3 0.2% 0 to 1.1.9 (inclusive) 1.1.10 January 7, 2026
CVE-2024-43146 Medium 4.3 0.4% 1.0.96.1 and earlier 1.0.97 August 7, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.