CVE-2024-6225 | Medium | 4.4 | 2024-06-21 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions… |
CVE-2024-22298 | Medium | 5.3 | 2024-06-10 | Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98. |
CVE-2024-0591 | Medium | 6.1 | 2024-03-13 | The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'A'… |
CVE-2023-6808 | Medium | 6.4 | 2024-02-05 | The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in al… |
CVE-2023-50860 | Medium | 6.5 | 2023-12-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Booking for Appointments and Events Calendar – Amelia… |
CVE-2023-4314 | High | 7.2 | 2023-09-11 | The wpDataTables WordPress plugin before 2.1.66 does not validate the "Serialized PHP array" input data before deserializing the data. This allows admins to de… |
CVE-2023-29427 | High | 7.1 | 2023-06-26 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin <= 1.0.75 versions. |
CVE-2023-27918 | Medium | 6.1 | 2023-05-10 | Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated at… |
CVE-2023-23876 | Medium | 6.5 | 2023-05-03 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TMS-Plugins wpDataTables plugin <= 2.1.49 versions. |
CVE-2022-29432 | Low | 3.4 | 2022-05-20 | Multiple Authenticated (administrator or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in TMS-Plugins wpDataTables plugin <= 2.1.27 o… |
CVE-2022-25618 | Low | 3.4 | 2022-04-04 | Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpDataTables (WordPress plugin) versions <= 2.1.27 |
CVE-2022-0837 | Medium | 5.4 | 2022-04-04 | The Amelia WordPress plugin before 1.0.48 does not have proper authorisation when handling Amelia SMS service, allowing any customer to send paid test SMS noti… |
CVE-2022-0825 | Medium | 5.4 | 2022-04-04 | The Amelia WordPress plugin before 1.0.49 does not have proper authorisation when managing appointments, allowing any customer to update other's booking status… |
CVE-2022-0720 | Medium | 5.4 | 2022-03-28 | The Amelia WordPress plugin before 1.0.47 does not have proper authorisation when managing appointments, allowing any customer to update other's booking, as we… |
CVE-2022-0687 | High | 8.8 | 2022-03-21 | The Amelia WordPress plugin before 1.0.47 stores image blobs into actual files whose extension is controlled by the user, which may lead to PHP backdoors being… |
CVE-2022-0627 | Medium | 6.1 | 2022-03-21 | The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cr… |
CVE-2022-0616 | Medium | 4.3 | 2022-03-21 | The Amelia WordPress plugin before 1.0.47 does not have CSRF check in place when deleting customers, which could allow attackers to make a logged in admin dele… |
CVE-2021-24200 | Medium | 6.5 | 2021-04-12 | The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Inj… |
CVE-2021-24199 | Medium | 6.5 | 2021-04-12 | The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Inj… |
CVE-2021-24198 | High | 8.1 | 2021-04-12 | The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the… |
CVE-2021-24197 | High | 8.1 | 2021-04-12 | The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the… |
CVE-2019-6012 | High | 7.2 | 2019-12-26 | SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via uns… |
CVE-2019-6011 | Medium | 6.1 | 2019-12-26 | Cross-site scripting vulnerability in wpDataTables Lite Version 2.0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecifi… |