---
id: "CVE-2026-103908"
page: "https://infrastack.ai/live/CVE-2026-103908"
kind: "vulnerability"
aliases: ["CVE-2026-103908"]
title: "WordPress AMP plugin: authenticated users can run arbitrary shortcodes"
severity: "medium"
cvss: 5.4
epss: null
exploited: false
status: "open"
category: "package"
products: []
ecosystems: []
tags: ["amp-for-wp", "package", "wordpress", "wordpress-plugin"]
not_affected_if: ["no-custom-level-users", "plugin-not-installed", "version-above-1.1.18"]
published_at: "2026-11-06T12:17:15+00:00"
first_seen_at: "2026-11-06T12:41:48+00:00"
updated_at: "2026-11-06T12:42:53+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-103908", "first_seen_at": "2026-11-06T12:41:48+00:00"}]
exploit_sources: []
---

# WordPress AMP plugin: authenticated users can run arbitrary shortcodes

Link for people: https://infrastack.ai/live/CVE-2026-103908 (this .md is for agents)

The AMP for WP plugin for WordPress, up to and including version 1.1.18, passes an unvalidated value to do_shortcode. An authenticated user with custom-level access or higher can run arbitrary WordPress shortcodes on the site.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of the AMP for WP plugin in the WordPress admin plugins list, or in the plugin's main file header.
- Confirm whether the 'ampforwp-cat-description' setting is enabled, since the source says it is on by default.

## Timeline

- 2026-11-06T12:41:48+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-103908

## From the sources

The The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.1.18. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for authenticated attackers, with custom-level access and above, to execute arbitrary shortcodes. The vulnerable output block is gated by the 'ampforwp-cat-description' setting, which is enabled by default, meaning the vast majority of installations are affected without any additional configuration change.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_