Melograno Venture Studio vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.6	EPSS 0.4%	CVE-2026-62112Amelia (WordPress plugin) · SQL Injection High7.6EPSS 0.4%2026-09-11CVE Database V5CVE-2026-62112 Editor SQL Injection in Amelia <= 2.4.9 versions. EPSS 0.4%Vulnerability Melograno Venture Studio CWE-89 #ghsa-qgwf-cmr2-fmwh	CVE Database V5	2026-09-11
High	7.1	EPSS 0.3%	CVE-2026-66597wpDataTables (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-08-20CVE Database V5CVE-2026-66597 CVE-2026-66597 is a high-severity vulnerability in the wpDataTables plugin by Melograno Venture Studio. It allows unauthenticated attackers to perform Cross-Site Scripting (XSS) attacks in versions up to 6.5.1.4. This vulnerability arises from improper neutralization of input during web page generation, classified under CWE-79. Exploitation requires user interaction but no privileges or authentication. The vulnerability impacts confidentiality, integrity, and availability to a limited extent. EPSS 0.3%Vulnerability Melograno Venture Studio CWE-79	CVE Database V5	2026-08-20
Critical	9.3	EPSS 0.5%	CVE-2026-57702Amelia (WordPress plugin) · SQL Injection Critical9.3EPSS 0.5%2026-07-13CVE Database V5CVE-2026-57702 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Melograno Venture Studio Amelia ameliabooking allows Blind SQL Injection.This issue affects Amelia: from n/a through <= 2.4.2. EPSS 0.5%Vulnerability Melograno Venture Studio CWE-89	CVE Database V5	2026-07-13
High	7.1	EPSS 0.3%	CVE-2026-57672wpDataTables (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-07-02CVE Database V5CVE-2026-57672 Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 6.5.1.1 versions. EPSS 0.3%Vulnerability Melograno Venture Studio CWE-79	CVE Database V5	2026-07-02

Page 1 of 1