The AMP for WP – Accelerated Mobile Pages plugin for WordPress contains a CSRF vulnerability due to inverted nonce verification logic in the amp_theme_ajaxcomments AJAX handler. This logic flaw causes the handler to reject requests with valid nonces while accepting those with missing or invalid nonces, enabling attackers to forge requests that submit comments on behalf of authenticated users. The vulnerability affects versions up to and including 1.1.9 and requires the plugin's template mode to be enabled. The CVSS 3.1 base score is 4.3, indicating medium severity. No patch or official remediation information is currently available, and no exploits have been observed in the wild.

An attacker can exploit this vulnerability to submit comments as if they were authenticated users, potentially leading to unauthorized content posting or manipulation. There is no direct confidentiality or availability impact reported. The attack requires user interaction (UI:R) and no privileges (PR:N).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling the plugin's template mode or restricting access to the affected AJAX handler to mitigate risk. Monitor official channels for updates or patches addressing this issue.