Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

TMS — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting TMS. AI-powered Chinese analysis, POCs, and references for each vulnerability.

TMS serves as a transportation management system optimizing logistics operations through route planning and fleet tracking. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation, often stemming from insufficient input validation and access controls. The system's exposure to internet-facing interfaces increases attack surface risks. While no major public incidents have been widely documented, the presence of five CVEs indicates persistent security challenges. Organizations implementing TMS should prioritize regular patching and network segmentation to mitigate potential exploitation risks. The integration with third-party APIs and external systems further necessitates robust security validation to prevent unauthorized access or data breaches.

CVE ID Title CVSS Severity Published
CVE-2026-108497 WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability — Amelia CWE-89 9.3 Critical 2026-10-15
CVE-2026-109684 WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability — Amelia CWE-862 5.3 Medium 2026-10-13
CVE-2026-96461 WordPress Amelia plugin <= 2.4.10 - Broken Access Control vulnerability — Amelia CWE-862 7.5 High 2026-10-09
CVE-2026-49080 WordPress wpDataTables plugin <= 7.3.6 - SQL Injection vulnerability — wpDataTables CWE-89 9.3 Critical 2026-06-16
CVE-2026-48889 WordPress Amelia plugin <= 2.3 - Privilege Escalation vulnerability — Amelia CWE-266 8.8 High 2026-06-15
CVE-2026-40795 WordPress Amelia plugin <= 2.2 - Broken Access Control vulnerability — Amelia CWE-862 6.5 Medium 2026-06-15
CVE-2026-40789 WordPress Amelia plugin <= 2.2 - Sensitive Data Exposure vulnerability — Amelia CWE-201 7.5 High 2026-06-15
CVE-2024-22298 WordPress Amelia plugin <= 1.0.98 - Broken Access Control vulnerability — Amelia CWE-862 5.3 Medium 2024-06-10
CVE-2024-31425 WordPress Amelia plugin <= 1.0.95 - Cross Site Request Forgery (CSRF) vulnerability — Amelia CWE-352 5.4 Medium 2024-04-15
CVE-2023-50860 WordPress Amelia Plugin <= 1.0.85 is vulnerable to Cross Site Scripting (XSS) — Booking for Appointments and Events Calendar – Amelia CWE-79 6.5 Medium 2023-12-28
CVE-2023-29427 WordPress Amelia Plugin <= 1.0.75 is vulnerable to Cross Site Scripting (XSS) — Booking for Appointments and Events Calendar – Amelia CWE-79 7.1 High 2023-06-26
CVE-2023-27918 WordPress plugin Appointment and Event Booking Calendar for WordPress 跨站脚本漏洞 — Appointment and Event Booking Calendar for WordPress - Amelia 6.1 - 2023-05-10

This page lists every published CVE security advisory associated with TMS. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.