CVE-2026-112327
WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The Amelia booking plugin for WordPress, developed by TMS, is affected by this vulnerability. An attacker could exploit it to inject malicious database commands, potentially allowing them to read, modify, or delete data stored in the website's database.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.11.
Affected versions
- ameliabooking
through 2.4.11