WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ameliabooking
Published
2026-06-02
Title
Amelia < 2.4 - Subscriber+ Privilege Escalation
Slug
ameliabooking
Published
2026-07-08
Title
Booking for Appointments and Events Calendar – Amelia < 2.4.3 - Unauthenticated SQL Injection
Slug
ameliabooking
Published
2026-07-16
Title
Booking for Appointments and Events Calendar – Amelia < 2.4.4 - Authenticated (Custom+) SQL Injection via Customer Import
Slug
ameliabooking
Published
2026-07-20
Title
Amelia < 2.4.4 - Amelia Manager+ Arbitrary User-Field Modification via Mass Assignment
Slug
ameliabooking
Published
2026-08-07
Title
Amelia Pro < 9.7 - Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR
Slug
ameliabooking
Published
2026-08-11
Title
Amelia < 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR
Slug
ameliabooking
Published
2026-08-24
Title
Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch
Slug
ameliabooking
Published
2026-08-24
Title
Amelia Pro < 9.8 - Provider+ Arbitrary Provider Password Update via IDOR
Slug
ameliabooking
Published
2026-08-27
Title
Amelia 1.2.32 - 2.4.8 - Amelia Customer+ Appointment Status Update and Self-Approval
Slug
ameliabooking
Published
2026-08-27
Title
Booking for Appointments and Events Calendar < 2.2.1 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission
Slug
ameliabooking
Published
2026-08-31
Title
Amelia < 2.4.9 - Unauthenticated Post-Booking Action Trigger
Slug
amen
Published
2024-05-24
Title
Amen <= 3.3.1 - Admin+ Stored XSS
Slug
amerisale-re
Published
2014-08-01
Title
Amerisale-Re - Remote Shell Upload
Slug
amerisale-re
Published
2014-08-01
Title
Amerisale-Re - netriesdetail/upload.php edit Parameter Reflected XSS
Slug
amilia-store
Published
2024-10-24
Title
Amilia Store <= 2.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
amin-chat-button
Published
2024-12-03
Title
Pulsating Chat Button < 1.4.2 - Stored XSS via CSRF
Slug
amministrazione-aperta
Published
2022-03-23
Title
Amministrazione Aperta < 3.8 - Admin+ LFI
Slug
amministrazione-trasparente
Published
2021-07-05
Title
CSRF Bypass in Multiple Plugins
Slug
amministrazione-trasparente
Published
2021-07-05
Title
Amministrazione Trasparente < 7.1.1 - Cross-Site Request Forgery
Slug
amministrazione-trasparente
Published
2023-10-12
Title
Amministrazione Trasparente < 8.0.5 - Admin+ Stored XSS
Slug
amministrazione-trasparente
Published
2025-08-30
Title
Amministrazione Trasparente < 9.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via print_r Function
Slug
amo-team-showcase
Published
2025-02-20
Title
AMO Team Showcase <= 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via amoteam_skills Shortcode
Slug
amocrm-webform
Published
2025-03-11
Title
amoCRM WebForm <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
amount-left-free-shipping-woocommerce
Published
2025-05-19
Title
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce < 2.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
amount-left-free-shipping-woocommerce
Published
2025-12-30
Title
Free Shipping Bar: Amount Left for Free Shipping for WooCommerce < 2.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting