Tms 9 CVEs across 4 Tms products. Browse Tms vulnerabilities, severities, and proof-of-concept exploits.
Tms products with known CVEs Tms CVEs — newest first CVE Severity Score Published Summary CVE-2026-49080Critical 9.32026-06-17 Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions. CVE-2026-48889High 8.82026-06-15 Subscriber Privilege Escalation in Amelia <= 2.3 versions. CVE-2026-40795Medium 6.52026-06-15 Subscriber Broken Access Control in Amelia <= 2.2 versions. CVE-2026-40789High 7.52026-06-15 Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions. CVE-2024-22298Medium 5.32024-06-10 Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98. CVE-2024-31425Medium 5.42024-04-15 Cross-Site Request Forgery (CSRF) vulnerability in TMS Amelia.This issue affects Amelia: from n/a through 1.0.95. CVE-2023-50860Medium 6.52023-12-28 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Booking for Appointments and Events Calendar – Amelia… CVE-2023-29427High 7.12023-06-26 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin <= 1.0.75 versions. CVE-2023-27918Medium 6.12023-05-10 Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated at…