Vulnerabilities / Booking for Appointments and Events Calendar – Amelia
Booking for Appointments and Events Calendar – Amelia vulnerabilities
Advisories WPSec published for Booking for Appointments and Events Calendar – Amelia. Other sources may list more. Its attack surface: Booking for Appointments and Events Calendar – Amelia on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-02 | WPSEC-2026-0310 | Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Unauthenticated Unpaid Booking Injection via Additional 'bookings' Entries | Medium 5.3 | 2.4.11 |
| 2026-10-02 | WPSEC-2026-0309 | Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Unauthenticated Payment Bypass via Package Reference (Incomplete Fix for CVE-2026-16582) | Medium 5.3 | 2.4.11 |
| 2026-10-02 | WPSEC-2026-0308 | Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Authenticated (Amelia Employee+) Insecure Direct Object Reference to Arbitrary Booking Status Update | Medium 4.3 | 2.4.11 |
License: CC BY 4.0