Booking for Appointments and Events Calendar vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Latest Booking for Appointments and Events Calendar vulnerabilities

CVE-2026-77705 — Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover (CVSS 7.2)
CVE-2026-77689 — Amelia Pro 9.0 - 9.8 - Unauthenticated Payment Bypass (CVSS 5.3)
CVE-2026-14215 — Amelia < 2.4.9 - Unauthenticated Post-Booking Action Trigger (CVSS 6.5)
CVE-2026-77704 — Amelia 1.2.32 - 2.4.8 - Amelia Customer+ Appointment Status Update and Self-Approval (CVSS 2.7)
CVE-2026-14216 — Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch (CVSS 6.5)
CVE-2026-14212 — Amelia Pro < 9.8 - Provider+ Arbitrary Provider Password Update via IDOR (CVSS 4.7)
CVE-2026-14213 — Amelia < 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR (CVSS 3.7)
CVE-2026-14211 — Amelia Pro < 9.7 - Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR (CVSS 3.8)
CVE-2026-14214 — Amelia < 2.4.4 - Amelia Manager+ Arbitrary User-Field Modification via Mass Assignment (CVSS 2.7)