CVE-2026-39487Disclosure

LOWCVSS 7.6 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ameliabooking Amelia ameliabooking allows Blind SQL Injection.This issue affects Amelia: from n/a through <= 2.1.1.

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/ameliabooking/vulnerability/wordpress-amelia-plugin-2-1-1-sql-injection-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

Public PoC is present in monitored signal
2 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

CVE@CVEnew178d
Disclosure
CVE-2026-39487 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ameliabooking Amelia ameliabooking allows Blind SQL http://Injection.Th… https://www.cve.org/CVERecord?id=CVE-2026-39487
Post summary
The text briefly announces CVE-2026-39487 as a blind SQL injection vulnerability affecting Amelia booking software, providing no PoC, exploit code, or patch details.
00010270
57.1K followersView on X
Infoflowcloud@infoflowcloud178d
Disclosure
🚨*CVE* CVE-2026-39487 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ameliabooking Amelia ameliabooking allows Blind SQL http://Injection.Th… https://www.cve.org/CVERecord?id=CVE-2026-39487 ----- Traducción: CVE-202… http://infoflow.cloud`
Post summary
CVE‑2026‑39487, a SQL injection vulnerability in Amelia booking software, has been publicly disclosed with technical details and a reference link that may serve as a demonstration.
0000049
71 followersView on X

Explore more

Back to dashboard