Description
WordPress Plugin AMP for WP-Accelerated Mobile Pages is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently make administrative changes to a website (update the plugin's settings, download/read/upload files, inject Posts, etc). WordPress Plugin AMP for WP-Accelerated Mobile Pages version 0.9.97.19 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 0.9.97.20 or latest
References
https://gist.github.com/sybrew/eb8533c5031bd749f0c6f55f114ab70f
https://www.webarxsecurity.com/amp-plugin-vulnerability/
https://www.wordfence.com/blog/2018/11/xss-injection-campaign-exploits-wordpress-amp-plugin/
https://ampforwp.com/explaining-the-this-plugin-was-closed-situation/
https://plugins.svn.wordpress.org/accelerated-mobile-pages/trunk/changelog.txt
Related Vulnerabilities
MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-44854)
PHP Use of Externally-Controlled Format String Vulnerability (CVE-2006-0200)
Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-3472)
WordPress Plugin Jekyll Exporter Remote Code Execution (2.2.0)
WordPress Plugin PDF Flipbook, 3D Flipbook WordPress-DearFlip Cross-Site Scripting (1.7.9)