What’s Vulnerable › Products

melograno Booking for Appointments and Events Calendar – Amelia vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your melograno Booking for Appointments and Events Calendar – Amelia version is affected

Latest melograno Booking for Appointments and Events Calendar – Amelia vulnerabilities

• CVE-2026-103915 — Booking for Appointments and Events Calendar <= 2.4.12 - Unauthenticated Sensitive Information Exposure in 'page' Parameter (CVSS 5.3)
• CVE-2026-16582 — Booking for Appointments and Events Calendar - Amelia <= 2.4.5 - Missing Authorization to Unauthenticated Payment Bypass (CVSS 5.3)
• CVE-2026-14311 — Booking for Appointments and Events Calendar – Amelia (Premium) <= 2.4.4 - Authenticated (Custom+) Missing Authorization to Limited Account Takeover (CVSS 5.4)
• CVE-2026-10148 — Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' Parameter (CVSS 6.4)
• CVE-2026-9055 — Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId' (CVSS 9.8)
• CVE-2026-6286 — Booking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission (CVSS 7.2)
• CVE-2026-14782 — Booking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer Import (CVSS 4.9)