Skip to content
OpenAdvisories

Product · TMS

Amelia

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-116388

    WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.

    TMS Amelia
  • Medium 6.5
    CVE-2026-116396

    WordPress Amelia plugin <= 2.4.12 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Amelia ameliabooking allows Stored XSS.This issue affects Amelia: from n/a through 2.4.12.

    TMS Amelia
  • Medium 5.3
    CVE-2026-109684

    WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.

    TMS Amelia
  • Medium 6.5
    CVE-2026-40795

    WordPress Amelia plugin <= 2.2 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Amelia <= 2.2 versions.

    TMS Amelia
  • Medium 5.3
    CVE-2024-22298

    WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98.

    TMS Amelia
  • Medium 5.4
    CVE-2024-31425

    WordPress Amelia plugin <= 1.0.95 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in TMS Amelia.This issue affects Amelia: from n/a through 1.0.95.

    TMS Amelia