The AMP for WP – Accelerated Mobile Pages plugin allows authenticated attackers with Subscriber level or higher to inject and execute arbitrary shortcodes through the author biographical information field. The vulnerability arises because the plugin does not validate the content before calling WordPress’s do_shortcode function, enabling arbitrary code to run within the WordPress environment. This can be used to read, modify, or delete site content or run other registered shortcode actions that may affect site integrity or availability.

WordPress sites that have the AMP for WP plugin at version 1.1.18 or earlier. The setting controlling the vulnerable output block, ampforwp-cat-description, is enabled by default, so the majority of deployments of these versions are affected. Attackers need at least Subscriber‑level or custom‑level access to modify the author biographical field; thus users with these roles who are entrusted with write permissions to author profiles can exploit the flaw.

The CVSS score of 5.4 indicates a medium severity. The EPSS score is not available, so the exact likelihood of exploitation cannot be quantified, but the flaw is not listed in the CISA KEV catalog. The attack vector is an authenticated, in‑site workflow requiring a role with custom‑level or higher access; an attacker would edit a user profile to insert malicious shortcodes into the description field. If the injected shortcode performs dangerous operations, the attacker can achieve full code execution inside the WordPress application, compromising confidentiality, integrity, and availability of the site.