WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ameliabooking
Published
2024-06-20
Title
Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
ameliabooking
Published
2024-08-07
Title
Booking for Appointments and Events Calendar – Amelia < 1.2.1 - Unauthenticated Full Path Disclosure
Slug
ameliabooking
Published
2024-09-04
Title
Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite < 1.2.5 - Missing Authorization to Sensitive Information Exposure
Slug
ameliabooking
Published
2025-02-23
Title
Amelia < 1.2.17 - Unauthenticated Insecure Direct Object Reference
Slug
ameliabooking
Published
2025-03-27
Title
Booking for Appointments and Events Calendar – Amelia < 1.2.20 - Unauthenticated Full Path Disclosure
Slug
ameliabooking
Published
2025-11-15
Title
Booking for Appointments and Events Calendar – Amelia < 1.2.36 - Unauthenticated SQL Injection via search
Slug
ameliabooking
Published
2025-11-18
Title
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
Slug
ameliabooking
Published
2026-01-08
Title
Booking for Appointments and Events Calendar – Amelia < 2.0.0 - Missing Authorization to Unauthenticated Multiple AJAX Actions
Slug
ameliabooking
Published
2026-01-11
Title
Amelia < 2.0 - Missing Authorization
Slug
ameliabooking
Published
2026-03-04
Title
Amelia < 2.0 - Employee+ Privilege Escalation
Slug
ameliabooking
Published
2026-03-25
Title
Amelia Booking < 9.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change
Slug
ameliabooking
Published
2026-03-31
Title
Amelia < 2.1.3 - Authenticated (Manager+) SQL Injection via 'sort' Parameter
Slug
ameliabooking
Published
2026-04-06
Title
Amelia < 2.2 - Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' Parameter
Slug
ameliabooking
Published
2026-03-25
Title
Amelia < 2.1.2 - Authenticated (Custom role+) SQL Injection
Slug
ameliabooking
Published
2026-04-23
Title
Booking for Appointments and Events Calendar – Amelia < 2.2.1 - Unauthenticated Information Exposure
Slug
ameliabooking
Published
2026-04-14
Title
Amelia < 2.3 - Unauthenticated Booking Status Manipulation
Slug
ameliabooking
Published
2026-04-28
Title
Booking for Appointments and Events Calendar – Amelia < 2.2.1 - Missing Authorization
Slug
amen
Published
2024-05-24
Title
Amen <= 3.3.1 - Admin+ Stored XSS
Slug
amerisale-re
Published
2014-08-01
Title
Amerisale-Re - Remote Shell Upload
Slug
amerisale-re
Published
2014-08-01
Title
Amerisale-Re - netriesdetail/upload.php edit Parameter Reflected XSS
Slug
amilia-store
Published
2024-10-24
Title
Amilia Store <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
amin-chat-button
Published
2024-12-03
Title
Pulsating Chat Button < 1.4.2 - Stored XSS via CSRF
Slug
amministrazione-aperta
Published
2022-03-23
Title
Amministrazione Aperta < 3.8 - Admin+ LFI
Slug
amministrazione-trasparente
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Slug
amministrazione-trasparente
Published
2021-07-05
Title
Amministrazione Trasparente < 7.1.1 - Cross-Site Request Forgery