WordPress Plugin Vulnerabilities

Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover

Description

The plugin does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia's customer or employee management permissions to set the password and email address of other users' WordPress accounts and take them over.

Proof of Concept

Affects Plugins

Plugin icon
ameliabooking
Fixed in 2.4.10

References

CVE
CVE-2026-77705

Classification

Type
IDOR
OWASP top 10
A5: Broken Access Control
CWE
CWE-639
CVSS
7.2 (high)

Miscellaneous

Original Researcher
Karthik Ramakrishnan
Submitter
Karthik Ramakrishnan
Verified
Yes
WPVDB ID
bfd0ce74-f91e-41fe-8288-7b1d34dd16fe

Timeline

Publicly Published
2026-09-10 (about 2 days ago)
Added
2026-09-10 (about 1 day ago)
Last Updated
2026-09-10 (about 1 day ago)

Other

Published
Title
Published
2026-05-27
Title
Meta Field Block < 1.5.2 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure
Published
2024-11-08
Title
Content Slider Block – Create fully functional slider with Gutenberg block < 3.1.6 - Authenticated (Contributor+) Post Disclosure
Published
2026-07-27
Title
MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure via commissions REST Endpoint
Published
2026-03-29
Title
Download Monitor < 5.1.8 - Insecure Direct Object Reference to Unauthenticated Arbitrary Order Completion via 'token' and 'order_id'
Published
2023-06-22
Title
WooCommerce Payments < 4.5.1 - Intent Parameter Tampering