plugin

Amp Toolbox Vulnerabilities

2 known security issues reported for the Amp Toolbox WordPress plugin. Most recent disclosed Mar 3, 2023.

2 high

Running Amp Toolbox on your site? Check whether your installed version is affected.

Scan your site free

CSSTidy - Server-Side Request Forgery

high

The module cerdic/csstidy, which is used in several plugins, is vulnerable to Server-Side Request Forgery due to the inclusion of test code that does not verify a user-provided URL. This can allow unauthenticated attackers to to make web requests to arbitrary locations originating from the web application which can be...

CVSS:
8.3
Affected:
up to 2.1.1
Fix:
No patched version reported
Disclosed:
Mar 3, 2023

CVE-2022-40700 on NVD →

AMP ToolBox <= 2.1.1 - Cross-Site Scripting

high

The AMP ToolBox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘url’ parameter in versions up to, and including, 2.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if t...

CVSS:
7.1
Affected:
up to 2.1.1
Fix:
No patched version reported
Disclosed:
Nov 14, 2017

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database