Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Tmsproducts Component: Amelia Clear all filters
TI-2024-05876 CVE-2024-6332 · GHSA-frqj-xr96-qh56

Missing authorization in ameliabooking Booking for Appointments and Events Calendar…

Priority LOW 29

The Booking for Appointments and Events Calendar – Amelia Premium and Lite plugins for WordPress are vulnerable to unauthorized access of data due to a missing capability check on the 'ameliaButtonCommand' function in al…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00352 Published 2024-09-05 No fix listed CWE-862
TI-2024-01386 CVE-2024-1484 · GHSA-gvmh-2wv7-22h7

Booking for Appointments and Events Calendar – Amelia <= 1.0.98 - Reflected Cross-Site Scripting

Priority LOW 28

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the date parameters in all versions up to, and including, 1.0.98 due to insufficient inpu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0048 Published 2024-03-13 No fix listed CWE-79