Skip to content
Noroxi

tms-outsource records

24 published records for vendor tms-outsource.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
16.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2024-22298
    39Monitor

    WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    tms-outsource · ameliaJun 10, 2024

  • CVE-2022-0687
    35Monitor

    Amelia < 1.0.46 - Manager+ RCE

    HighCVSS 8.8No exploitEPSS 1%

    tms-outsource · ameliaMar 21, 2022

  • CVE-2021-24198
    32Monitor

    wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion

    HighCVSS 8.1No exploitEPSS 1%

    tms-outsource · wpdatatablesApr 12, 2021

  • CVE-2021-24197
    32Monitor

    wpDataTables < 3.4.2 - Improper Access Control leading to Table Permission Takeover

    HighCVSS 8.1No exploitEPSS 1%

    tms-outsource · wpdatatablesApr 12, 2021

  • CVE-2023-4314
    28Monitor

    wpDataTables < 2.1.66 - Admin+ PHP Object Injection

    HighCVSS 7.2No exploitEPSS 1%

    tms-outsource · wpdatatablesSep 11, 2023

  • CVE-2019-6012
    28Monitor

    SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote authenticated attackers to execute arbitrary S

    HighCVSS 7.2No exploitEPSS 1%

    tms-outsource · wpdatatables liteDec 26, 2019

  • CVE-2021-24199
    26Monitor

    wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter

    MediumCVSS 6.5No exploitEPSS 1%

    tms-outsource · wpdatatablesApr 12, 2021

  • CVE-2021-24200
    26Monitor

    wpDataTables < 3.4.2 - Blind SQL Injection via length Parameter

    MediumCVSS 6.5No exploitEPSS 1%

    tms-outsource · wpdatatablesApr 12, 2021

  • CVE-2019-6011
    24Monitor

    Cross-site scripting vulnerability in wpDataTables Lite Version 2.0.11 and earlier allows remote attackers to inject arbitrary web script or

    MediumCVSS 6.1No exploitEPSS 0%

    tms-outsource · wpdatatables liteDec 26, 2019

  • CVE-2022-0627
    24Monitor

    Amelia < 1.0.46 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    tms-outsource · ameliaMar 21, 2022

  • CVE-2024-0591
    24Monitor

    wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin <= 3.4.2.2 - Reflected Cross-Site Scripting.

    MediumCVSS 6.1No exploitEPSS 0%

    tms-outsource · wpdatatablesMar 13, 2024

  • CVE-2023-27918
    24Monitor

    Cross-site scripting vulnerability in Appointment and Event Booking Calendar for WordPress - Amelia versions prior to 1.0.76 allows a remote

    MediumCVSS 6.1No exploitEPSS 0%

    tms-outsource · ameliaMay 10, 2023

  • CVE-2023-29427
    24Monitor

    WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    tms-outsource · ameliaJun 26, 2023

  • CVE-2022-0825
    21Monitor

    Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update

    MediumCVSS 5.4No exploitEPSS 0%

    tms-outsource · ameliaApr 4, 2022

  • CVE-2022-0837
    21Monitor

    Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure

    MediumCVSS 5.4No exploitEPSS 0%

    tms-outsource · ameliaApr 4, 2022

  • CVE-2022-0720
    21Monitor

    Amelia < 1.0.47 - Customer+ Arbitrary Appointments Update and Sensitive Data Disclosure

    MediumCVSS 5.4No exploitEPSS 0%

    tms-outsource · ameliaMar 28, 2022

  • CVE-2023-6808
    21Monitor

    Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    tms-outsource · ameliaFeb 5, 2024

  • CVE-2024-6552
    21Monitor

    Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure

    MediumCVSS 5.3No exploitEPSS 0%

    ameliabooking · booking for appointments and events calendar – ameliaAug 8, 2024

  • CVE-2023-23876
    21Monitor

    WordPress wpDataTables Plugin <= 2.1.49 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    tms-outsource · wpdatatablesMay 3, 2023

  • CVE-2023-50860
    21Monitor

    WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    tms-outsource · ameliaDec 28, 2023

  • CVE-2022-25618
    19Monitor

    WordPress wpDataTables plugin <= 2.1.27 - Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    tms-outsource · wpdatatables liteApr 4, 2022

  • CVE-2022-29432
    19Monitor

    WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

    MediumCVSS 4.8No exploitEPSS 0%

    tms-outsource · wpdatatablesMay 20, 2022

  • CVE-2024-6225
    19Monitor

    Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    tms-outsource · ameliaJun 21, 2024

  • CVE-2022-0616
    17Monitor

    Amelia < 1.0.46 - Arbitrary Customer Deletion via CSRF

    MediumCVSS 4.3No exploitEPSS 0%

    tms-outsource · ameliaMar 21, 2022