CVE-2026-6101
Deferred Deferred - Pending Action

Arbitrary File Write in AMP for WP WordPress Plugin

Publication date: 2026-07-07

Last updated on: 2026-07-07

Assigner: Wordfence

Description
The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to Arbitrary File Write in versions up to and including 1.1.12. This is due to unsafe ZIP file extraction in the ampforwp_save_local_font() function combined with inadequate cleanup that fails to remove nested directories and files. This makes it possible for authenticated attackers, with Author-level access and above, and permissions granted by an Administrator, to write arbitrary files to the server in a web-accessible location, potentially leading to remote code execution on hosts that execute PHP files in the uploads directory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-07
Last Modified
2026-07-07
Generated
2026-07-07
AI Q&A
2026-07-07
EPSS Evaluated
N/A
NVD
CVE-2026-6101
EUVD
EUVD-2026-42041

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
wpbeaverbuilder amp_for_wp to 1.1.12 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-73 The product allows user input to control or influence paths or file names that are used in filesystem operations.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The AMP for WP – Accelerated Mobile Pages plugin for WordPress has a vulnerability in versions up to and including 1.1.12 that allows arbitrary file write. This occurs because the plugin's ampforwp_save_local_font() function unsafely extracts ZIP files and does not properly clean up nested directories and files. As a result, authenticated users with Author-level access or higher, and permissions granted by an Administrator, can write arbitrary files to a web-accessible location on the server.

This vulnerability can potentially lead to remote code execution on servers that execute PHP files in the uploads directory.

Impact Analysis

This vulnerability can have serious impacts including allowing attackers with certain authenticated access to write arbitrary files to the server in locations accessible via the web.

If the server executes PHP files in the uploads directory, this can lead to remote code execution, enabling attackers to run malicious code on the server.

Such unauthorized access and code execution can compromise the integrity, confidentiality, and availability of the affected system.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-6101. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart