Skip to content
OpenAdvisories

Vendor

TMS

17 known vulnerabilities.

Products

Amelia 11 Booking for Appointments and Events Calendar – Amelia 2 wpDataTables 2 Appointment and Event Booking Calendar for WordPress - Amelia 1 IvyForms 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-123148

    WordPress IvyForms plugin <= 1.5.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TMS IvyForms ivyforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IvyForms: from n/a through 1.5.1.

    TMS IvyForms
  • Medium 5.3
    CVE-2026-116388

    WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.

    TMS Amelia
  • Medium 6.5
    CVE-2026-116396

    WordPress Amelia plugin <= 2.4.12 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Amelia ameliabooking allows Stored XSS.This issue affects Amelia: from n/a through 2.4.12.

    TMS Amelia
  • Medium 5.3
    CVE-2026-109684

    WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.

    TMS Amelia
  • Medium 6.5
    CVE-2026-40795

    WordPress Amelia plugin <= 2.2 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Amelia <= 2.2 versions.

    TMS Amelia
  • Medium 5.3
    CVE-2024-22298

    WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98.

    TMS Amelia
  • Medium 5.4
    CVE-2024-31425

    WordPress Amelia plugin <= 1.0.95 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in TMS Amelia.This issue affects Amelia: from n/a through 1.0.95.

    TMS Amelia
  • Medium 6.5
    CVE-2023-50860

    WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Booking for Appointments and Events Calendar – Amelia allows Stored XSS.This issue affects Booking for Appointments and Events Calendar – Amelia: from n/…

    TMS Booking for Appointments and Events Calendar – Amelia
  • Medium 6.1
    CVE-2023-27918

    Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1…

    TMS Appointment and Event Booking Calendar for WordPress - Amelia Web / CMS