WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ameliabooking
Published
2026-08-24
Title
Amelia Pro < 9.8 - Provider+ Arbitrary Provider Password Update via IDOR
Slug
ameliabooking
Published
2026-08-27
Title
Amelia 1.2.32 - 2.4.8 - Amelia Customer+ Appointment Status Update and Self-Approval
Slug
ameliabooking
Published
2026-08-27
Title
Booking for Appointments and Events Calendar < 2.2.1 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission
Slug
ameliabooking
Published
2026-08-31
Title
Amelia < 2.4.9 - Unauthenticated Post-Booking Action Trigger
Slug
ameliabooking
Published
2026-09-11
Title
Booking for Appointments and Events Calendar – Amelia < 2.4.10 - Authenticated (Editor+) SQL Injection
Slug
ameliabooking
Published
2026-09-17
Title
Booking for Appointments and Events Calendar - Amelia < 2.4.6 - Missing Authorization to Unauthenticated Payment Bypass
Slug
ameliabooking
Published
2026-09-10
Title
Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover
Slug
ameliabooking
Published
2026-09-10
Title
Amelia Pro 9.0 - 9.8 - Unauthenticated Payment Bypass
Slug
ameliabooking
Published
2026-09-11
Title
Booking for Appointments and Events Calendar – Amelia < 2.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' Parameter
Slug
ameliabooking
Published
2026-09-17
Title
Booking for Appointments and Events Calendar – Amelia (Premium) < 2.4.5 - Authenticated (Custom+) Missing Authorization to Limited Account Takeover
Slug
ameliabooking
Published
2026-10-02
Title
Booking for Appointments and Events Calendar – Amelia < 2.4.11 - Missing Authorization
Slug
ameliabooking
Published
2026-10-13
Title
Booking for Appointments and Events Calendar – Amelia < 2.4.11 - Missing Authorization
Slug
ameliabooking
Published
2026-10-13
Title
Booking for Appointments and Events Calendar – Amelia < 2.4.11 - Unauthenticated SQL Injection
Slug
ameliabooking
Published
2026-10-20
Title
Booking for Appointments and Events Calendar – Amelia < 2.4.12 - Unauthenticated SQL Injection
Slug
ameliabooking
Published
2026-10-26
Title
Booking for Appointments and Events Calendar – Amelia < 2.4.11 - Missing Authorization
Slug
ameliabooking
Published
2026-10-26
Title
Booking for Appointments and Events Calendar – Amelia < 2.4.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ameliabooking
Published
2026-10-30
Title
Booking for Appointments and Events Calendar < 2.4.13 - Unauthenticated Sensitive Information Exposure in 'page' Parameter
Slug
amen
Published
2024-05-24
Title
Amen <= 3.3.1 - Admin+ Stored XSS
Slug
amerisale-re
Published
2014-08-01
Title
Amerisale-Re - Remote Shell Upload
Slug
amerisale-re
Published
2014-08-01
Title
Amerisale-Re - netriesdetail/upload.php edit Parameter Reflected XSS
Slug
amilia-store
Published
2024-10-24
Title
Amilia Store <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
amin-chat-button
Published
2024-12-03
Title
Pulsating Chat Button < 1.4.2 - Stored XSS via CSRF
Slug
amministrazione-aperta
Published
2022-03-23
Title
Amministrazione Aperta < 3.8 - Admin+ LFI
Slug
amministrazione-trasparente
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Slug
amministrazione-trasparente
Published
2021-07-05
Title
Amministrazione Trasparente < 7.1.1 - Cross-Site Request Forgery