50 matches found
CVE-2026-116396
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TMS Amelia ameliabooking allows Stored XSS.This issue affects Amelia: from n/a through 2.4.12...
CVE-2026-116388
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...
CVE-2026-116388
The Amelia (TMS ameliabooking) plugin for WordPress, versions up to and including 2.4.10 , is susceptible to a Missing Authorization vulnerability (CWE-862). The root cause is incorrectly configured access control security levels , which may allow for unauthorized access to specific functionaliti...
EUVD-2026-109990
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...
CVE-2026-116388 WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...
CVE-2026-116396
The TMS Amelia ameliabooking WordPress plugin versions up to and including 2.4.12 are vulnerable to a Stored Cross-site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation , which allows an attacker to inject malicious scripts. While th...
CVE-2026-116396 WordPress Amelia plugin <= 2.4.12 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TMS Amelia ameliabooking allows Stored XSS.This issue affects Amelia: from n/a through 2.4.12...
EUVD-2026-109989
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TMS Amelia ameliabooking allows Stored XSS.This issue affects Amelia: from n/a through 2.4.12...
CVE-2026-112327
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.11...
EUVD-2026-108054
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.11...
CVE-2026-112327 WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.11...
CVE-2026-112327
The TMS Amelia (ameliabooking) WordPress plugin is vulnerable to a SQL Injection flaw (CWE-89) in versions 2.4.11 and below . The issue stems from the improper neutralization of special elements used in an SQL command, potentially allowing an attacker to execute arbitrary SQL queries. This vulner...
CVE-2026-108497
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10...
CVE-2026-108497
The TMS Amelia (ameliabooking) WordPress plugin is vulnerable to SQL Injection due to the improper neutralization of special elements used in an SQL command. This vulnerability affects versions from n/a through 2.4.10 . A successful exploitation could allow an attacker to interact with the underl...
CVE-2026-108497 WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10...
EUVD-2026-102005
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10...
CVE-2026-108497: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10...
CVE-2026-109684
The TMS Amelia (ameliabooking) WordPress plugin, versions up to and including 2.4.10 , is vulnerable to a Broken Access Control issue (CWE-862 ). This Missing Authorization vulnerability occurs due to incorrectly configured access control security levels, which could allow an attacker to exploit ...
CVE-2026-109684: Missing Authorization
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10...