Vulnerability history

Unauthenticated Sensitive Information Exposure in 'page' Parameter vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) vulnerability

SQL Injection vulnerability

SQL Injection vulnerability

Broken Access Control vulnerability

Broken Access Control vulnerability

Authenticated (Custom+) Missing Authorization to Limited Account Takeover vulnerability

Missing Authorization to Unauthenticated Payment Bypass vulnerability

Amelia Manager+ WordPress Account Takeover vulnerability

Unauthenticated Payment Bypass vulnerability

SQL Injection vulnerability

Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Unauthenticated Post-Booking Action Trigger vulnerability

WordPress Booking for Appointments and Events Calendar - Amelia (Premium) plugin 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId' vulnerability

Amelia Customer+ Appointment Status Update and Self-Approval vulnerability

Provider+ Arbitrary Provider Password Update vulnerability

Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission vulnerability

Unauthenticated Notification Queue Dispatch vulnerability

Sensitive Data Exposure vulnerability

Provider+ Cross-Customer Appointment Data Disclosure via IDOR vulnerability

Amelia Manager+ Arbitrary User-Field Modification vulnerability

SQL Injection vulnerability

Privilege Escalation vulnerability

Unauthenticated Authorization Bypass vulnerability

Broken Access Control vulnerability

Sensitive Data Exposure vulnerability

Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' Parameter vulnerability

Authenticated (Manager+) SQL Injection via 'sort' Parameter vulnerability

Broken Authentication vulnerability

SQL Injection vulnerability

Privilege Escalation vulnerability

Missing Authorization to Unauthenticated Multiple AJAX Actions vulnerability

Broken Access Control vulnerability

WordPress Amelia plugin - 1.2.18-1.2.36 - Unauthenticated Sensitive Information Exposure vulnerability

Unauthenticated SQL Injection via search vulnerability

Unauthenticated Full Path Disclosure vulnerability

Insecure Direct Object References (IDOR) vulnerability

Missing Authorization to Sensitive Information Exposure vulnerability

Unauthenticated Full Path Disclosure vulnerability

Malicious Polyfill.io Embed vulnerability

Authenticated Stored Cross-Site Scripting vulnerability

Cross Site Request Forgery (CSRF) vulnerability

Reflected Cross-Site Scripting vulnerability

Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode vulnerability

Broken Access Control vulnerability

Cross Site Scripting (XSS) vulnerability

Cross Site Scripting (XSS) vulnerability

SMS Service Abuse and Sensitive Data Disclosure vulnerability

Arbitrary Appointments Status Update vulnerability

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

Arbitrary Appointments Update and Sensitive Data Disclosure vulnerability

Remote Code Execution (RCE) vulnerability

Arbitrary Customer Deletion via Cross-Site Request Forgery (CSRF) vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability