Tms
9 CVEs across 4 Tms products. Browse Tms vulnerabilities, severities, and proof-of-concept exploits.
Tms products with known CVEs
Tms CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-49080 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions. |
CVE-2026-48889 | High | 8.8 | 2026-06-15 | Subscriber Privilege Escalation in Amelia <= 2.3 versions. |
CVE-2026-40795 | Medium | 6.5 | 2026-06-15 | Subscriber Broken Access Control in Amelia <= 2.2 versions. |
CVE-2026-40789 | High | 7.5 | 2026-06-15 | Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions. |
CVE-2024-22298 | Medium | 5.3 | 2024-06-10 | Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98. |
CVE-2024-31425 | Medium | 5.4 | 2024-04-15 | Cross-Site Request Forgery (CSRF) vulnerability in TMS Amelia.This issue affects Amelia: from n/a through 1.0.95. |
CVE-2023-50860 | Medium | 6.5 | 2023-12-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Booking for Appointments and Events Calendar – Amelia… |
CVE-2023-29427 | High | 7.1 | 2023-06-26 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin <= 1.0.75 versions. |
CVE-2023-27918 | Medium | 6.1 | 2023-05-10 | Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated at… |