How many TMS Amelia CVEs are in CISA KEV?

None of TMS Amelia's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for TMS Amelia vulnerabilities?

No TMS Amelia CVEs currently have a tracked public exploit in this dataset.

Which versions of TMS Amelia are affected?

16 distinct TMS Amelia versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in TMS Amelia CVEs?

TMS Amelia's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-201 (Insertion of Sensitive Information Into Sent Data), CWE-266 (Incorrect Privilege Assignment), CWE-352 (Cross-Site Request Forgery (CSRF)).

How many critical TMS Amelia vulnerabilities are there?

TMS Amelia has 1 critical and 2 high-severity CVEs.

What is the average severity of TMS Amelia CVEs?

The average CVSS base score across TMS Amelia's scored CVEs is 7.6.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

TMS

5 CVEs

TMS Amelia Vulnerabilities

Name: TMS Amelia vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Amelia by TMS.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.6

Avg CVSS

2024–2026

Last updated June 15, 2026

Overview

TMS Amelia has 5 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

This page aggregates every publicly disclosed vulnerability (CVE) affecting TMS Amelia, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of TMS Amelia's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of TMS Amelia's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No TMS Amelia CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every TMS Amelia version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

<= 2.22 CVEs
>= 2.2.12 CVEs
<= 1.0.951 CVE
<= 1.0.981 CVE
<= 2.31 CVE
>= 1.0.961 CVE
>= 1.0.991 CVE
>= 2.41 CVE

Fixed in

> 2.22 CVEs
2.2.12 CVEs
> 1.0.951 CVE
> 1.0.981 CVE
> 2.31 CVE
1.0.961 CVE
1.0.991 CVE
2.41 CVE

Find a version

5 CVEs

Sort

WordPress Amelia plugin <= 2.3 - Privilege Escalation vulnerability
CVE-2026-48889
Patch
CWE-266
High · CVSS 8.8
EPSS 0.4% (34th pct)2026-06-15
WordPress Amelia plugin <= 2.2 - Broken Access Control vulnerability
CVE-2026-40795
Patch
CWE-862
Medium · CVSS 6.5
EPSS 0.3% (19th pct)2026-06-15
WordPress Amelia plugin <= 2.2 - Sensitive Data Exposure vulnerability
CVE-2026-40789
Patch
CWE-201
High · CVSS 7.5
EPSS 0.3% (22th pct)2026-06-15
WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability
CVE-2024-22298
Patch
CWE-862
Critical · CVSS 9.8
EPSS 0.4% (31th pct)2024-06-10
WordPress Amelia plugin <= 1.0.95 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-31425
Patch
CWE-352
Medium · CVSS 5.4
EPSS 0.2% (10th pct)2024-04-15

Common weakness types

The CWE weakness categories most often found in TMS Amelia CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many TMS Amelia CVEs were published each year.

2024

2

2026

3

Other TMS products

Browse vulnerabilities for other products by TMS.

Booking for Appointments and Events Calendar – Amelia2 CVEs Appointment and Event Booking Calendar for WordPress - Amelia1 CVEs wpDataTables1 CVEs

All TMS vulnerabilities

Frequently asked questions

Common questions about TMS Amelia vulnerabilities.

How many CVEs does TMS Amelia have?: TMS Amelia has 5 published CVE records since 2024.
How many TMS Amelia CVEs are in CISA KEV?: None of TMS Amelia's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for TMS Amelia vulnerabilities?: No TMS Amelia CVEs currently have a tracked public exploit in this dataset.
Which versions of TMS Amelia are affected?: 16 distinct TMS Amelia versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in TMS Amelia CVEs?: TMS Amelia's CVEs most often map to these CWE weakness types: CWE-862 (Missing Authorization), CWE-201 (Insertion of Sensitive Information Into Sent Data), CWE-266 (Incorrect Privilege Assignment), CWE-352 (Cross-Site Request Forgery (CSRF)).
How many critical TMS Amelia vulnerabilities are there?: TMS Amelia has 1 critical and 2 high-severity CVEs.
What is the average severity of TMS Amelia CVEs?: The average CVSS base score across TMS Amelia's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track TMS Amelia vulnerabilities

Monitor new TMS Amelia vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing