TMS vulnerabilities
12 vulnerabilities
Known vulnerabilities in TMS products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Amelia8 vulnerabilities
- Booking For Appointments And Events Calendar – Amelia2 vulnerabilities
- Appointment And Event Booking Calendar For Wordpress Amelia1 vulnerabilities
- Wpdatatables1 vulnerabilities
CVE-2026-108497tmsamelia
EPSS score0.24%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.10.CVE-2026-109684tmsameliaEPSS score0.18%
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.CVE-2024-31425tmsamelia+1EPSS score0.20%
Cross-Site Request Forgery (CSRF) vulnerability in TMS Amelia.This issue affects Amelia: from n/a through 1.0.95.CVE-2024-22298tms-outsourceamelia+2EPSS score0.38%
Missing Authorization vulnerability in TMS Amelia ameliabooking.This issue affects Amelia: from n/a through 1.0.98.CVE-2026-40789tmsamelia+1EPSS score0.42%
Unauthenticated Sensitive Data Exposure in Amelia <= 2.2 versions.CVE-2026-40795tmsamelia+1EPSS score0.30%
Subscriber Broken Access Control in Amelia <= 2.2 versions.CVE-2026-48889tmsamelia+1EPSS score0.42%
Subscriber Privilege Escalation in Amelia <= 2.3 versions.CVE-2026-49080tmswpdatatables+1EPSS score0.40%
Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions.CVE-2026-96461tmsamelia+1EPSS score0.20%
Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through 2.4.10.CVE-2023-29427tms-outsourceamelia+2EPSS score0.41%
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in TMS Booking for Appointments and Events Calendar – Amelia plugin <= 1.0.75 versions.CVE-2023-27918tms-outsourceamelia+1EPSS score0.51%
Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an arbitrary script by having a user who is logging in the WordPress where the product is installed visit a malicious URL.CVE-2023-50860tms-outsourceamelia+2EPSS score0.33%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Booking for Appointments and Events Calendar – Amelia allows Stored XSS.This issue affects Booking for Appointments and Events Calendar – Amelia: from n/a through 1.0.85.