EN ES
Start free
Menu

Booking for Appointments and Events Calendar – Amelia: known security problems

55 known security problems reported for this WordPress plugin, with the affected versions, the fix and what to do.

Updated

In short

There are 55 known security problems on this page. Each one has a fixed version. Updating to version 9.8.1 or newer covers every fixed problem listed here.

Based on public reports. Check the plugin’s changelog. Watchfox AI may be wrong.

Get an email when your site is affected: install Watchfox AI (free)

This week

A stranger could see private information they should not see (up to and including 2.4.12)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.12
Fixed in
2.4.13
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.13 or newer.
Official ID
CVE-2026-103915
Report title
Booking for Appointments and Events Calendar <= 2.4.12 - Unauthenticated Sensitive Information Exposure in 'page' Parameter
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (up to and including 2.4.10)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.10
Fixed in
2.4.11
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.11 or newer.
Official ID
CVE-2026-116388
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Missing Authorization
First reported
Sources
This week

Someone with a contributor account on your site could plant harmful code that runs for your visitors or admins (up to and including 2.4.12)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.12
Fixed in
2.4.13
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.13 or newer.
Official ID
CVE-2026-116396
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
First reported
Sources
This week

A stranger could read or change the data in your site’s database (up to and including 2.4.11)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.11
Fixed in
2.4.12
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.12 or newer.
Official ID
CVE-2026-112327
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.4.11 - Unauthenticated SQL Injection
First reported
Sources
This week

A stranger could read or change the data in your site’s database (up to and including 2.4.10)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.10
Fixed in
2.4.11
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.11 or newer.
Official ID
CVE-2026-108497
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Unauthenticated SQL Injection
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (up to and including 2.4.10) (2)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.10
Fixed in
2.4.11
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.11 or newer.
Official ID
CVE-2026-109684
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Missing Authorization
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (up to and including 2.4.10) (3)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.10
Fixed in
2.4.11
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.11 or newer.
Official ID
CVE-2026-96461
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Missing Authorization
First reported
Sources
This week

Someone could take over your site as an admin (up to and including 2.4.4)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.4
Fixed in
2.4.5
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.5 or newer.
Official ID
CVE-2026-14311
Report title
Booking for Appointments and Events Calendar – Amelia (Premium) <= 2.4.4 - Authenticated (Custom+) Missing Authorization to Limited Account Takeover
First reported
Sources
This week

A stranger could do things on your site they should not be allowed to (up to and including 2.4.5)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.5
Fixed in
2.4.6
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.6 or newer.
Official ID
CVE-2026-16582
Report title
Booking for Appointments and Events Calendar - Amelia <= 2.4.5 - Missing Authorization to Unauthenticated Payment Bypass
First reported
Sources
This week

Someone could take over your site as an admin (before 2.4.10)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 2.4.10
Fixed in
2.4.10
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.10 or newer.
Official ID
CVE-2026-77705
Report title
Booking for Appointments and Events Calendar – Amelia < 2.4.10 - Authenticated (Custom Role+) Privilege Escalation
First reported
Sources
This week

Someone with a contributor account on your site could plant harmful code that runs for your visitors or admins (up to and including 2.4.9)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.9
Fixed in
2.4.10
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.10 or newer.
Official ID
CVE-2026-10148
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' Parameter
First reported
Sources
This week

Someone with an editor account on your site could read or change the data in your site’s database

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.9
Fixed in
2.4.10
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.10 or newer.
Official ID
CVE-2026-62112
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Editor+) SQL Injection
First reported
Sources
This week

A stranger could use it to harm your site (from 9.0 up to and including 9.8.0)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • From 9.0 up to and including 9.8.0
Fixed in
9.8.1
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 9.8.1 or newer.
Official ID
CVE-2026-77689
Report title
Booking for Appointments and Events Calendar – Amelia 9.0 - 9.8.0 - Unauthenticated Payment Bypass
First reported
Sources
This week

A stranger could take over your site as an admin

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • From 8.0 up to and including 9.6.2
Fixed in
9.6.3
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 9.6.3 or newer.
Official ID
CVE-2026-9055
Report title
Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (before 2.4.9)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 2.4.9
Fixed in
2.4.9
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.9 or newer.
Official ID
CVE-2026-14215
Report title
Booking for Appointments and Events Calendar – Amelia < 2.4.9 - Missing Authorization
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (from 1.2.32 up to and including 2.4.8)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • From 1.2.32 up to and including 2.4.8
Fixed in
2.4.9
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.9 or newer.
Official ID
CVE-2026-77704
Report title
Booking for Appointments and Events Calendar – Amelia 1.2.32 - 2.4.8 - Missing Authorization
First reported
Sources
This week

Someone could use it to harm your site (from 9.0 up to and including 9.7)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • From 9.0 up to and including 9.7
Fixed in
9.8
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 9.8 or newer.
Official ID
CVE-2026-14212
Report title
Booking for Appointments and Events Calendar – Amelia 9.0 - 9.7 - Authenticated (Provider+) Arbitrary Provider Password Update
First reported
Sources
This week

A stranger could plant harmful code that runs for your visitors or admins (up to and including 2.2)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.2
Fixed in
2.2.1
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.2.1 or newer.
Official ID
CVE-2026-6286
Report title
Booking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (before 2.4.7)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 2.4.7
Fixed in
2.4.7
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.7 or newer.
Official ID
CVE-2026-14216
Report title
Booking for Appointments and Events Calendar – Amelia < 2.4.7 - Missing Authorization
First reported
Sources
This week

Someone could use it to harm your site (before 2.4.6)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 2.4.6
Fixed in
2.4.6
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.6 or newer.
Official ID
CVE-2026-14213
Report title
Booking for Appointments and Events Calendar – Amelia < 2.4.6 - Authenticated (Custom role+) Information Exposure
First reported
Sources
This week

Someone could use it to harm your site (up to and including 9.6)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 9.6
Fixed in
9.7
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 9.7 or newer.
Official ID
CVE-2026-14211
Report title
Amelia Pro <= 9.6 - Insecure Direct Object Reference to Authenticated (Provider+) Customer Data Disclosure
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (before 2.4.4)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 2.4.4
Fixed in
2.4.4
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.4 or newer.
Official ID
CVE-2026-14214
Report title
Booking for Appointments and Events Calendar – Amelia < 2.4.4 - Missing Authorization
First reported
Sources
This week

Someone could read or change the data in your site’s database (up to and including 2.4.3)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.3
Fixed in
2.4.4
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.4 or newer.
Official ID
CVE-2026-14782
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer Import
First reported
Sources
This week

A stranger could read or change the data in your site’s database (up to and including 2.4.2)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.4.2
Fixed in
2.4.3
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4.3 or newer.
Official ID
CVE-2026-57702
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.4.2 - Unauthenticated SQL Injection
First reported
Sources
This week

Anyone with an account on your site, even a basic one could take over your site as an admin

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.3
Fixed in
2.4
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.4 or newer.
Official ID
CVE-2026-48889
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.3 - Authenticated (Subscriber+) Privilege Escalation
First reported
Sources
This week

A stranger could use it to harm your site (up to and including 2.2.1)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.2.1
Fixed in
2.3
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.3 or newer.
Official ID
CVE-2026-6449
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.2.1 - Unauthenticated Authorization Bypass via Remote Approval Endpoint
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (up to and including 2.2)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.2
Fixed in
2.2.1
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.2.1 or newer.
Official ID
CVE-2026-40795
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.2 - Missing Authorization
First reported
Sources
This week

A stranger could use it to harm your site (up to and including 2.2)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.2
Fixed in
2.2.1
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.2.1 or newer.
Official ID
CVE-2026-40789
Report title
Booking for Appointments and Events Calendar – Amelia <= 2.2 - Unauthenticated Information Exposure
First reported
Sources
This week

Someone could take over your site as an admin (up to and including 2.1.3)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.1.3
Fixed in
2.2
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.2 or newer.
Official ID
CVE-2026-5465
Report title
Amelia <= 2.1.3 - Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' Parameter
First reported
Sources
This week

Someone could read or change the data in your site’s database (up to and including 2.1.2)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.1.2
Fixed in
2.1.3
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.1.3 or newer.
Official ID
CVE-2026-4668
Report title
Amelia <= 2.1.2 - Authenticated (Manager+) SQL Injection via 'sort' Parameter
First reported
Sources
This week

Anyone with an account on your site, even a basic one could use it to harm your site

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • From 8.3 up to and including 9.1.2
Fixed in
9.2
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 9.2 or newer.
Official ID
CVE-2026-2931
Report title
Amelia Booking 8.3 - 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change
First reported
Sources
This week

Someone could read or change the data in your site’s database (up to and including 2.1.1)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 2.1.1
Fixed in
2.1.2
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.1.2 or newer.
Official ID
CVE-2026-39487
Report title
Amelia <= 2.1.1 - Authenticated (Custom role+) SQL Injection
First reported
Sources
This week

Someone could take over your site as an admin (up to and including 1.2.38)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.2.38
Fixed in
2.0
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.0 or newer.
Official ID
CVE-2026-24963
Report title
Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Authenticated (Employee+) Privilege Escalation
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (up to and including 1.2.38)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.2.38
Fixed in
2.0
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.0 or newer.
Official ID
CVE-2026-24967
Report title
Amelia <= 1.2.38 - Missing Authorization
First reported
Sources
This week

A stranger could do things on your site they should not be allowed to (up to and including 1.2.38)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.2.38
Fixed in
2.0.0
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 2.0.0 or newer.
Official ID
CVE-2025-14720
Report title
Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Missing Authorization to Unauthenticated Multiple AJAX Actions
First reported
Sources
This week

A stranger could see private information they should not see (from 1.2.18 up to and including 1.2.36)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • From 1.2.18 up to and including 1.2.36
Fixed in
1.2.37
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.2.37 or newer.
Official ID
CVE-2023-49282
Report title
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
First reported
Sources
This week

A stranger could read or change the data in your site’s database (up to and including 1.2.35)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.2.35
Fixed in
1.2.36
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.2.36 or newer.
Official ID
CVE-2025-12482
Report title
Booking for Appointments and Events Calendar – Amelia <= 1.2.35 - Unauthenticated SQL Injection via search
First reported
Sources
This week

A stranger could use it to harm your site (up to and including 1.2.19)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.2.19
Fixed in
1.2.20
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.2.20 or newer.
Official ID
CVE-2025-2578
Report title
Booking for Appointments and Events Calendar – Amelia <= 1.2.19 - Unauthenticated Full Path Disclosure
First reported
Sources
This week

A stranger could use it to harm your site (up to and including 1.2.16)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.2.16
Fixed in
1.2.17
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.2.17 or newer.
Official ID
CVE-2025-26965
Report title
Amelia <= 1.2.16 - Unauthenticated Insecure Direct Object Reference
First reported
Sources
This week

Someone could see private information they should not see

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.2.4
Fixed in
1.2.5
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.2.5 or newer.
Official ID
CVE-2024-6332
Report title
Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite <= 1.2.4 - Missing Authorization to Sensitive Information Exposure
First reported
Sources
This week

A stranger could use it to harm your site (up to and including 1.2)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.2
Fixed in
1.2.1
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.2.1 or newer.
Official ID
CVE-2024-6552
Report title
Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure
First reported
Sources
This week

Someone could plant harmful code that runs for your visitors or admins (up to and including 1.1.5)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.1.5
Fixed in
1.1.6
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.1.6 or newer.
Official ID
CVE-2024-6225
Report title
Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
First reported
Sources
This week

Someone could trick a logged-in admin into changing settings without knowing (up to and including 1.0.95)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.0.95
Fixed in
1.0.96
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.96 or newer.
Official ID
CVE-2024-31425
Report title
Amelia <= 1.0.95 - Cross-Site Request Forgery
First reported
Sources
This week

Someone could plant harmful code that runs for your visitors or admins (up to and including 1.0.98)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.0.98
Fixed in
1.0.99
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.99 or newer.
Official ID
CVE-2024-1484
Report title
Booking for Appointments and Events Calendar – Amelia <= 1.0.98 - Reflected Cross-Site Scripting
First reported
Sources
This week

Someone with a contributor account on your site could plant harmful code that runs for your visitors or admins (up to and including 1.0.93)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.0.93
Fixed in
1.0.94
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.94 or newer.
Official ID
CVE-2023-6808
Report title
Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
First reported
Sources
This week

Someone could do things on your site they should not be allowed to (up to and including 1.0.98)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.0.98
Fixed in
1.0.99
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.99 or newer.
Official ID
CVE-2024-22298
Report title
Amelia <= 1.0.98 - Missing Authorization
First reported
Sources
This week

Someone could plant harmful code that runs for your visitors or admins (up to and including 1.0.85)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.0.85
Fixed in
1.0.86
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.86 or newer.
Official ID
CVE-2023-50860
Report title
Booking for Appointments and Events Calendar – Amelia <= 1.0.85 - Stored Cross-Site Scripting via Shortcode
First reported
Sources
This week

A stranger could plant harmful code that runs for your visitors or admins (up to and including 1.0.75)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.0.75
Fixed in
1.0.76
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.76 or newer.
Official ID
CVE-2023-29427
Report title
Amelia <= 1.0.75 - Unauthenticated Reflected Cross-Site Scripting via 'code'
First reported
Sources
This week

Someone could use it to harm your site (before 1.0.49)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 1.0.49
Fixed in
1.0.49
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.49 or newer.
Official ID
CVE-2022-0825
Report title
Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure
First reported
Sources
This week

Someone could use it to harm your site (before 1.0.48)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 1.0.48
Fixed in
1.0.48
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.48 or newer.
Official ID
CVE-2022-0837
Report title
Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam
First reported
Sources
This week

Someone could use it to harm your site (up to and including 1.0.46)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.0.46
Fixed in
1.0.47
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.47 or newer.
Official ID
CVE-2022-0834
Report title
Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName
First reported
Sources
This week

Someone could use it to harm your site (before 1.0.47)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 1.0.47
Fixed in
1.0.47
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.47 or newer.
Official ID
CVE-2022-0720
Report title
Appointment and Event Booking Calendar for WordPress - Amelia < 1.0.47 - Arbitrary Booking Update and Sensitive Data Exposure
First reported
Sources
This week

Someone could trick a logged-in admin into changing settings without knowing (up to and including 1.0.46)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.0.46
Fixed in
1.0.47
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.47 or newer.
Official ID
CVE-2022-0616
Report title
Amelia <= 1.0.46 - Cross-Site Request Forgery
First reported
Sources
This week

Someone could plant harmful code that runs for your visitors or admins (up to and including 1.0.46)

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Up to and including 1.0.46
Fixed in
1.0.47
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.47 or newer.
Official ID
CVE-2022-0627
Report title
Amelia <= 1.0.46 - Reflected Cross-Site Scripting
First reported
Sources
This week

Someone could run their own code on your site and take it over

A trusted security source confirmed it. If your site has an affected version, fix it this week.

Affected versions
  • Before 1.0.47
Fixed in
1.0.47
What to do
If your site has an affected version, update Booking for Appointments and Events Calendar – Amelia to version 1.0.47 or newer.
Official ID
CVE-2022-0687
Report title
Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload
First reported
Sources

Where this comes from

We collect these reports from public security sources and rewrite them in plain words. Each problem shows its sources and the date we first saw it. This page never says whether your own site is affected: only a check of your site’s versions can tell.

All plugins and themes

Get an email when your site is affected.

Install Watchfox AI once. It checks your plugins and themes against this list every day, for free.

Install Watchfox AI (free)