Login Request a demo
AM
Product
Amelia
by Tms-outsource · last CVE Aug 8, 2024
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 1High 1Medium 11Low 0
Severity
All severities13Critical1High1Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Amelia to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-29427
6.1
0%
Jun 26
WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)
Affected: through 1.0.75
CVE-2023-27918
6.1
1%
May 10
Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an…
Affected: before 1.0.76
CVE-2022-0627
6.1
1%
Mar 21
Amelia < 1.0.46 - Reflected Cross-Site Scripting
Affected: before 1.0.47
CVE-2023-6808
5.4
1%
Feb 5
Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Affected: through 1.0.93
CVE-2023-50860
5.4
0%
Dec 28
WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS)
Affected: through 1.0.85
CVE-2022-0837
5.4
1%
Apr 4
Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure
Affected: before 1.0.48
CVE-2022-0825
5.4
1%
Apr 4
Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update
Affected: before 1.0.49
CVE-2022-0720
5.4
1%
Mar 28
Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure
Affected: before 1.0.47
CVE-2024-6552
5.3
0%
Aug 8
Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure
Affected: through 1.2
CVE-2024-6225
4.8
0%
Jun 21
Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Affected: before 1.1.6
CVE-2022-0616
4.3
0%
Mar 21
Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF
Affected: before 1.0.47
Showing 11