The developers of the popular AMP plugin for WordPress – AMP for WP – have released a patch for a critical vulnerability discovered last month.
While the work was underway to eliminate the vulnerability, the plugin was removed from the corresponding section on WordPress.org. Last week, he was returned to the “system”.
According to the developers, the reason for the temporary withdrawal of the plug-in was a vulnerability that could be exploited by people who are not site administrators.
WordPress users who have installed this plugin are advised to download the patch and apply it.
If automatic updates are enabled in the plugin settings, then the patch may have already been applied. Otherwise, the plugin will need to be updated manually.
Recall that earlier this month a serious vulnerability was discovered in the WP GDPR Compliance plugin.