What is CVE-2026-6101?

CVE-2026-6101 is a high-severity vulnerability in Mohammed_kaludi Amp For Wp – Accelerated Mobile Pages, classified under External Control of File Name or Path. CVSS score: 7.5/10. Published 2026-07-07.

How severe is CVE-2026-6101?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Mohammed_kaludi Amp For Wp – Accelerated Mobile Pages

CVE-2026-6101

The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Arbitrary File Write in versions up to and including 1.1.12. This is due to unsafe ZIP file extraction in the ampforwp_save_local_font() function combined with…

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Mohammed_kaludi Amp For Wp – Accelerated Mobile Pages — versions 0

Weakness classification (CWE)

CWE-73 — External Control of File Name or Path

References

security@wordfence.com
security@wordfence.com
security@wordfence.com
security@wordfence.com
security@wordfence.com
security@wordfence.com
security@wordfence.com
security@wordfence.com
security@wordfence.com
security@wordfence.com

Frequently asked questions

What is CVE-2026-6101?: CVE-2026-6101 is a high-severity vulnerability in Mohammed_kaludi Amp For Wp – Accelerated Mobile Pages, classified under External Control of File Name or Path. CVSS score: 7.5/10. Published 2026-07-07.
How severe is CVE-2026-6101?: High severity. CVSS v3 base score is 7.5 out of 10.