CVE-2026-57702

CriticalCVSS 9.3

Published: 13/07/2026(UTC)Updated: 13/07/2026(UTC)Translated: 14/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

The Amelia WordPress plugin contains a Blind SQL Injection vulnerability due to improper neutralization of special elements in SQL commands. This affects versions up to and including 2.4.2.

Risk Assessment

An attacker can exploit this vulnerability to read, modify, or delete database records, potentially compromising the confidentiality and integrity of the organization's data.

Recommendation

Immediately update the Amelia plugin to a version newer than 2.4.2 if available, or apply temporary mitigations such as input filtering.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Melograno Venture Studio Amelia ameliabooking allows Blind SQL Injection.This issue affects Amelia: from n/a through <= 2.4.2.