Vulnerabilidades do TMS Amelia
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam TMS Amelia: 6 registro(s), com versões afetadas e correções.
CVE-2026-108497
Crítica · 9.3
CWE-89 15/10/2026
WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10.
CVE-2026-109684
Média · 5.3
CWE-862 13/10/2026
WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.
CVE-2026-96461
Alta · 7.5
CWE-862 09/10/2026
WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.
CVE-2026-48889
Alta · 8.8
CWE-266 15/06/2026
WordPress Amelia plugin <= 2.3 - Privilege Escalation vulnerability
Subscriber Privilege Escalation in Amelia <= 2.3 versions.
CVE-2026-40795
Média · 6.5
CWE-862 15/06/2026
WordPress Amelia plugin <= 2.2 - Broken Access Control vulnerability
Subscriber Broken Access Control in Amelia <= 2.2 versions.
CVE-2026-40789
Alta · 7.5
CWE-201 15/06/2026
WordPress Amelia plugin <= 2.2 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions.