Advisories · Technology

Amelia.

Every CVE that names Amelia among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-39487 CVE record

CVSS 7.6 High

WordPress Amelia plugin <= 2.1.1 - SQL Injection vulnerability
- Amelia
- SQL injection
Not analysed yet 8 Apr 2026
CVE-2026-24963 CVE record

CVSS 7.2 High

WordPress Amelia plugin <= 1.2.38 - Privilege Escalation vulnerability
- Amelia
- Privilege escalation
Not analysed yet 5 Mar 2026
CVE-2026-24967 CVE record

CVSS 5.3 Medium

WordPress Amelia plugin <= 1.2.38 - Broken Access Control vulnerability
- Amelia
- Broken access control
Not analysed yet 3 Feb 2026
CVE-2025-26965 CVE record

CVSS 5.3 Medium

WordPress Amelia plugin <= 1.2.16 - Insecure Direct Object References (IDOR) vulnerability
- Amelia
- Broken access control
Not analysed yet 25 Feb 2025
CVE-2022-0837 CVE record

Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure
- Amelia
Not analysed yet 4 Apr 2022