Ameliabooking Amelia vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ameliabooking Amelia: 3 record(s), with affected versions and fixes.
CVE-2026-39487
High · 7.6
CWE-89 Apr 8, 2026
WordPress Amelia plugin <= 2.1.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ameliabooking Amelia ameliabooking allows Blind SQL Injection.This issue affects Amelia: from n/a through <= 2.1.1.
CVE-2026-24963
High · 7.2
CWE-266 Mar 5, 2026
WordPress Amelia plugin <= 1.2.38 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in ameliabooking Amelia ameliabooking allows Privilege Escalation.This issue affects Amelia: from n/a through <= 1.2.38.
CVE-2026-24967
Medium · 5.3
CWE-862 Feb 3, 2026
WordPress Amelia plugin <= 1.2.38 - Broken Access Control vulnerability
Missing Authorization vulnerability in ameliabooking Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through <= 1.2.38.