TMS vulnerabilities
Published CVEs affecting TMS products: 7 record(s), with severity, exploitation and fixes.
CVE-2026-108497
Critical · 9.3
CWE-89 Oct 15, 2026
WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10.
CVE-2026-109684
Medium · 5.3
CWE-862 Oct 13, 2026
WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.
CVE-2026-96461
High · 7.5
CWE-862 Oct 9, 2026
WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.
CVE-2026-49080
Critical · 9.3
CWE-89 Jun 17, 2026
WordPress wpDataTables plugin <= 7.3.6 - SQL Injection vulnerability
Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions.
CVE-2026-48889
High · 8.8
CWE-266 Jun 15, 2026
WordPress Amelia plugin <= 2.3 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Amelia <= 2.3 versions.
CVE-2026-40795
Medium · 6.5
CWE-862 Jun 15, 2026
WordPress Amelia plugin <= 2.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Amelia <= 2.2 versions.
CVE-2026-40789
High · 7.5
CWE-201 Jun 15, 2026
WordPress Amelia plugin <= 2.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions.