Live › vulnerability › CVE-2026-112327
Go to dashboardThe Amelia booking plugin for WordPress has an SQL injection flaw in versions up to 2.4.11. A remote attacker can run SQL against the site database, which can expose user accounts and other stored data.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ameliabooking | wordpress | <= 2.4.11 | 2.4.12 |
Check the installed Amelia (ameliabooking) plugin version in WordPress admin under Plugins; anything 2.4.11 or older is affected.
Update the ameliabooking plugin to 2.4.12 or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from n/a through 2.4.11.
This page as .md · .json · in your agent: get_signal("CVE-2026-112327")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.