Vulnerabilities / PWA for WP & AMP
PWA for WP & AMP vulnerabilities
Advisories WPSec published for PWA for WP – Progressive Web Apps Made Simple. Other sources may list more. Its attack surface: PWA for WP & AMP on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0905 | PWA for WP & AMP <= 1.7.88.1 - Unauthenticated Sensitive Information Exposure via Publicly Accessible FCM Service-Account JSON File | Medium 5.9 | 1.7.88.2 |
License: CC BY 4.0