Tms-outsource vulnerabilities

Products

• Amelia 13
• Wpdatatables 8
• Wpdatatables Lite 3

Newest

• ameliabooking booking for appointments and events calendar – amelia, tms-outsource amelia +1 more Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure CVE-2024-6552 5.3 MediumAugust 8, 2024
• ameliabooking booking for appointments and events calendar – amelia, tms-outsource amelia, amelia booking for appointments and events calendar – amelia pro +2 more Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2024-6225 4.4 MediumJune 21, 2024
• ameliabooking amelia WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability CVE-2024-22298 5.3 MediumJune 10, 2024
• tms-outsource wpdatatables, wpdatatables – wordpress data table, dynamic tables & table charts plugin +1 more wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting. CVE-2024-0591 6.1 MediumMarch 13, 2024
• ameliabooking booking for appointments and events calendar – amelia, tms-outsource amelia +1 more Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode CVE-2023-6808 6.4 MediumFebruary 5, 2024
• ameliabooking booking for appointments and events calendar – amelia, tms-outsource amelia +1 more WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS) CVE-2023-50860 6.5 MediumDecember 28, 2023
• tms-outsource wpdatatables wpDataTables < 2.1.66 - Admin+ PHP Object Injection CVE-2023-4314 7.2 HighSeptember 11, 2023
• ameliabooking booking for appointments and events calendar – amelia, tms-outsource amelia +1 more WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS) CVE-2023-29427 7.1 HighJune 26, 2023
• tms appointment and event booking calendar for wordpress - amelia, tms-outsource amelia +1 more Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress -... CVE-2023-27918 6.1 MediumMay 10, 2023
• tms-outsource wpdatatables WordPress wpDataTables Plugin <= 2.1.49 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23876 6.5 MediumMay 3, 2023
• tms-outsource wpdatatables, tms-plugins wpdatatables – tables & table charts (wordpress plugin) +1 more WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities CVE-2022-29432 3.4 LowMay 20, 2022
• tms-outsource wpdatatables lite, tms-plugins wpdatatables – tables & table charts (wordpress plugin) +1 more WordPress wpDataTables plugin <= 2.1.27 - Stored Cross-Site Scripting (XSS) vulnerability CVE-2022-25618 3.4 LowApril 4, 2022
• ameliabooking amelia Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure CVE-2022-0837 5.4 MediumApril 4, 2022
• tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 more Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update CVE-2022-0825 5.4 MediumApril 4, 2022
• tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 more Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure CVE-2022-0720 5.4 MediumMarch 28, 2022
• tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 more Amelia < 1.0.46 - Manager+ RCE CVE-2022-0687 8.8 HighMarch 21, 2022
• tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 more Amelia < 1.0.46 - Reflected Cross-Site Scripting CVE-2022-0627 6.1 MediumMarch 21, 2022
• tms-outsource amelia, unknown amelia – events & appointments booking calendar +1 more Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF CVE-2022-0616 4.3 MediumMarch 21, 2022
• tms-outsource wpdatatables, wpdatatables – tables & table charts +1 more wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter CVE-2021-24200 6.5 MediumApril 12, 2021
• tms-outsource wpdatatables, wpdatatables – tables & table charts +1 more wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter CVE-2021-24199 6.5 MediumApril 12, 2021
• tms-outsource wpdatatables, wpdatatables – tables & table charts +1 more wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion CVE-2021-24198 8.1 HighApril 12, 2021
• tms-outsource wpdatatables, wpdatatables – tables & table charts +1 more wpDataTables < 3.4.2 - Improper Access Control leading to Table Permission Takeover CVE-2021-24197 8.1 HighApril 12, 2021
• tms-outsource wpdatatables lite SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote... CVE-2019-6012 7.2 HighDecember 26, 2019
• tms-outsource wpdatatables lite Cross-site scripting vulnerability in wpDataTables Lite Version 2.0.11 and earlier allows remote... CVE-2019-6011 6.1 MediumDecember 26, 2019