CVE-2026-112327: The Amelia Booking Plugin SQL Injection — Update Tonight (2026)
CVE-2026-112327 is a critical unauthenticated SQL injection in the Amelia booking plugin for WordPress. If your site runs Amelia 2.4.11 or older, anyone on the internet can read, modify, or delete your site’s database — including your customers’ names, phone numbers, and booking details — with no login required. The fix is already out, but … Read more