WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability

This is a record in the CVE List, the public register of security flaws. The title and any summary are in the source's own words.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.11.

Kind: Check with your IT provider
Started: 22 Oct 2026, 08:01
Why we can name the supplier: An official register says it: a CVE record, CISA's list of exploited flaws or the NCSC

Read it at the source

Products it names

Amelia (TMS (Melograno Ventures))

The latest

We aim to update this thread. For the latest, check the supplier's own page directly: www.cve.org/CVERecord?id=CVE-2026-112327.

This entry comes from our research build of public sources made on 24 Oct 2026.