PatchSiren

ameliabooking CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH ameliabooking CVE published 2026-04-08

CVE-2026-39487

A SQL injection vulnerability was discovered in the Amelia plugin for WordPress, affecting versions from n/a through 2.1.1. The vulnerability has a CVSS score of 7.6 and is classified as HIGH. This issue allows for blind SQL injection due to improper neutralization of special elements used in an SQL command. Users of the Amelia plugin for WordPress should be aware of this vulnerability and take steps to m [truncated]