Skip to content
OpenAdvisories

Vendor

TMS

17 known vulnerabilities.

Products

Amelia 11 Booking for Appointments and Events Calendar – Amelia 2 wpDataTables 2 Appointment and Event Booking Calendar for WordPress - Amelia 1 IvyForms 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2026-96461

    WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.

    TMS Amelia
  • High 8.8
    CVE-2026-48889

    WordPress Amelia plugin <= 2.3 - Privilege Escalation vulnerability

    Subscriber Privilege Escalation in Amelia <= 2.3 versions.

    TMS Amelia
  • High 7.5
    CVE-2026-40789

    WordPress Amelia plugin <= 2.2 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions.

    TMS Amelia
  • High 7.5
    CVE-2026-28039

    WordPress wpDataTables plugin <= 6.5.0.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TMS wpDataTables wpdatatables allows PHP Local File Inclusion.This issue affects wpDataTables: from n/a through 6.5.0.1.

    TMS wpDataTables
  • High 7.1
    CVE-2023-29427

    WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin <= 1.0.75 versions.

    TMS Booking for Appointments and Events Calendar – Amelia