Amelia vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AM

Product

Amelia

by TMS · last CVE Oct 26, 2026

11

CVEs

0

On KEV

9.8

Max CVSS

6

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 3High 3Medium 5Low 0

Severity

All severities11 Critical3 High3 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Amelia to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-22298	9.8	0%	Jun 10	WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability Affected: through 1.0.98
CVE-2026-112327	9.3	0%	Oct 22	WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability Affected: through 2.4.11
CVE-2026-108497	9.3	0%	Oct 15	WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability Affected: through 2.4.10
CVE-2026-48889	8.8	0%	Jun 15	WordPress Amelia plugin <= 2.3 - Privilege Escalation vulnerability Affected: through 2.3
CVE-2026-96461	7.5	0%	Oct 9	WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability Affected: through 2.4.10
CVE-2026-40789	7.5	0%	Jun 15	WordPress Amelia plugin <= 2.2 - Sensitive Data Exposure vulnerability Affected: through 2.2
CVE-2026-116396 New	6.5	0%	Oct 26	WordPress Amelia plugin <= 2.4.12 - Cross Site Scripting (XSS) vulnerability Affected: through 2.4.12
CVE-2026-40795	6.5	0%	Jun 15	WordPress Amelia plugin <= 2.2 - Broken Access Control vulnerability Affected: through 2.2
CVE-2024-31425	5.4	0%	Apr 15	WordPress Amelia plugin <= 1.0.95 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 1.0.95
CVE-2026-116388 New	5.3	0%	Oct 26	WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability Affected: through 2.4.10
CVE-2026-109684	5.3	0%	Oct 13	WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability Affected: through 2.4.10