TM
Vendor
Tms-outsource
24
CVEs
0
On KEV
0
New 30D
Products
AM9.8
Amelia
Tms-outsource
13 CVEs0 on KEV0 new
WP8.1
Wpdatatables
Tms-outsource
8 CVEs0 on KEV0 new
WL7.2
Wpdatatables Lite
Tms-outsource
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-6552 | AM Amelia Tms-outsource | 5.3 | Aug 8 | Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure |
| CVE-2024-6225 | AM Amelia Tms-outsource | 4.8 | Jun 21 | Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting |
| CVE-2024-22298 | AM Amelia Tms-outsource | 9.8 | Jun 10 | WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability |
| CVE-2024-0591 | WP Wpdatatables Tms-outsource | 6.1 | Mar 13 | wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting. |
| CVE-2023-6808 | AM Amelia Tms-outsource | 5.4 | Feb 5 | Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode |
| CVE-2023-50860 | AM Amelia Tms-outsource | 5.4 | Dec 28 | WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-4314 | WP Wpdatatables Tms-outsource | 7.2 | Sep 11 | wpDataTables < 2.1.66 - Admin+ PHP Object Injection |
| CVE-2023-29427 | AM Amelia Tms-outsource | 6.1 | Jun 26 | WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-27918 | AM Amelia Tms-outsource | 6.1 | May 10 | Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote unauthenticated attacker to inject an… |
| CVE-2023-23876 | WP Wpdatatables Tms-outsource | 5.4 | May 3 | WordPress wpDataTables Plugin <= 2.1.49 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-29432 | WP Wpdatatables Tms-outsource | 4.8 | May 20 | WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities |
| CVE-2022-25618 | WL Wpdatatables Lite Tms-outsource | 4.8 | Apr 4 | WordPress wpDataTables plugin <= 2.1.27 - Stored Cross-Site Scripting (XSS) vulnerability |
| CVE-2022-0837 | AM Amelia Tms-outsource | 5.4 | Apr 4 | Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure |
| CVE-2022-0825 | AM Amelia Tms-outsource | 5.4 | Apr 4 | Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update |
| CVE-2022-0720 | AM Amelia Tms-outsource | 5.4 | Mar 28 | Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure |
| CVE-2022-0687 | AM Amelia Tms-outsource | 8.8 | Mar 21 | Amelia < 1.0.46 - Manager+ RCE |
| CVE-2022-0627 | AM Amelia Tms-outsource | 6.1 | Mar 21 | Amelia < 1.0.46 - Reflected Cross-Site Scripting |
| CVE-2022-0616 | AM Amelia Tms-outsource | 4.3 | Mar 21 | Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF |
| CVE-2021-24200 | WP Wpdatatables Tms-outsource | 6.5 | Apr 12 | wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter |
| CVE-2021-24199 | WP Wpdatatables Tms-outsource | 6.5 | Apr 12 | wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter |
| CVE-2021-24198 | WP Wpdatatables Tms-outsource | 8.1 | Apr 12 | wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion |
| CVE-2021-24197 | WP Wpdatatables Tms-outsource | 8.1 | Apr 12 | wpDataTables < 3.4.2 - Improper Access Control leading to Table Permission Takeover |
| CVE-2019-6012 | WL Wpdatatables Lite Tms-outsource | 7.2 | Dec 26 | SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors |
| CVE-2019-6011 | WL Wpdatatables Lite Tms-outsource | 6.1 | Dec 26 | Cross-site scripting vulnerability in wpDataTables Lite Version 2.0.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors |