Advisories · Technology
TMS Amelia.
Every CVE that names TMS Amelia among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability
- TMS Amelia
- Broken access control
- CVSS 6.5 Medium
WordPress Amelia plugin <= 2.4.12 - Cross Site Scripting (XSS) vulnerability
- TMS Amelia
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability
- TMS Amelia
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability
- TMS Amelia
- SQL injection
- CVSS 5.3 Medium
WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability
- TMS Amelia
- Broken access control
- CVSS 7.5 High
WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability
- TMS Amelia
- Broken access control
- CVSS 8.8 High
WordPress Amelia plugin <= 2.3 - Privilege Escalation vulnerability
- TMS Amelia
- Privilege escalation
- CVSS 6.5 Medium
WordPress Amelia plugin <= 2.2 - Broken Access Control vulnerability
- TMS Amelia
- Broken access control
- CVSS 7.5 High
WordPress Amelia plugin <= 2.2 - Sensitive Data Exposure vulnerability
- TMS Amelia
- Information disclosure
- CVSS 5.3 Medium
WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability
- TMS Amelia
- Broken access control
- CVSS 5.4 Medium
WordPress Amelia plugin <= 1.0.95 - Cross Site Request Forgery (CSRF) vulnerability
- TMS Amelia
- Cross-site request forgery (CSRF)