Log in Start free

TMS

Products

ProductCVEsExploitedLatest
Amelia11–Oct 26, 2026
Booking for Appointments and Events Calendar – Amelia2–Dec 28, 2023
wpDataTables2–Jun 16, 2026
Appointment and Event Booking Calendar for WordPress - Amelia1–May 10, 2023
IvyForms1–Nov 7, 2026

Exploited and recent CVEs

  • CVE-2026-123148 Medium 5.3 WordPress IvyForms plugin <= 1.5.1 - Broken Access Control vulnerability –
  • CVE-2026-116388 Medium 5.3 WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability 0.2%
  • CVE-2026-116396 Medium 6.5 WordPress Amelia plugin <= 2.4.12 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-112327 Critical 9.3 WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability 0.3%
  • CVE-2026-108497 Critical 9.3 WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability 0.2%
  • CVE-2026-109684 Medium 5.3 WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability 0.2%
  • CVE-2026-96461 High 7.5 WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability 0.2%
  • CVE-2026-49080 Critical 9.3 WordPress wpDataTables plugin <= 7.3.6 - SQL Injection vulnerability 0.3%
  • CVE-2026-48889 High 8.8 WordPress Amelia plugin <= 2.3 - Privilege Escalation vulnerability 0.4%
  • CVE-2026-40795 Medium 6.5 WordPress Amelia plugin <= 2.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-40789 High 7.5 WordPress Amelia plugin <= 2.2 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-28039 High 7.5 WordPress wpDataTables plugin <= 6.5.0.1 - Local File Inclusion vulnerability 0.4%
  • CVE-2024-22298 Medium 5.3 WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability 0.4%
  • CVE-2024-31425 Medium 5.4 WordPress Amelia plugin <= 1.0.95 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2023-50860 Medium 6.5 WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2023-29427 High 7.1 WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-27918 Medium 6.1 Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by h 0.5%