WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ameliabooking
Published
2022-03-14
Title
Amelia < 1.0.48 - Customer+ SMS Service Abuse and Sensitive Data Disclosure
Slug
ameliabooking
Published
2022-03-14
Title
Amelia < 1.0.49 - Customer+ Arbitrary Appointments Status Update
Slug
ameliabooking
Published
2023-04-06
Title
Appointment and Event Booking Calendar for WordPress < 1.0.76 - Reflected XSS
Slug
ameliabooking
Published
2023-12-22
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.86 - Contributor+ Stored XSS
Slug
ameliabooking
Published
2024-01-18
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.94 - Contributor+ Stored Cross-Site Scripting via shortcode
Slug
ameliabooking
Published
2024-01-17
Title
Amelia < 1.0.99 - Missing Authorization
Slug
ameliabooking
Published
2024-02-29
Title
Booking for Appointments and Events Calendar – Amelia < 1.0.99 - Reflected Cross-Site Scripting
Slug
ameliabooking
Published
2024-04-10
Title
Amelia < 1.0.96 - Cross-Site Request Forgery
Slug
ameliabooking
Published
2024-06-20
Title
Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
ameliabooking
Published
2024-08-07
Title
Booking for Appointments and Events Calendar – Amelia < 1.2.1 - Unauthenticated Full Path Disclosure
Slug
ameliabooking
Published
2024-09-04
Title
Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite < 1.2.5 - Missing Authorization to Sensitive Information Exposure
Slug
ameliabooking
Published
2025-02-23
Title
Amelia < 1.2.17 - Unauthenticated Insecure Direct Object Reference
Slug
ameliabooking
Published
2025-03-27
Title
Booking for Appointments and Events Calendar – Amelia < 1.2.20 - Unauthenticated Full Path Disclosure
Slug
ameliabooking
Published
2025-11-15
Title
Booking for Appointments and Events Calendar – Amelia < 1.2.36 - Unauthenticated SQL Injection via search
Slug
ameliabooking
Published
2025-11-18
Title
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
Slug
ameliabooking
Published
2026-01-08
Title
Booking for Appointments and Events Calendar – Amelia < 2.0.0 - Missing Authorization to Unauthenticated Multiple AJAX Actions
Slug
ameliabooking
Published
2026-01-11
Title
Amelia < 2.0 - Missing Authorization
Slug
ameliabooking
Published
2026-03-04
Title
Amelia < 2.0 - Employee+ Privilege Escalation
Slug
ameliabooking
Published
2026-03-25
Title
Amelia Booking 8.3 - 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change
Slug
ameliabooking
Published
2026-03-31
Title
Amelia < 2.1.3 - Authenticated (Manager+) SQL Injection via 'sort' Parameter
Slug
ameliabooking
Published
2026-04-06
Title
Amelia < 2.2 - Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' Parameter
Slug
ameliabooking
Published
2026-03-25
Title
Amelia < 2.1.2 - Authenticated (Custom role+) SQL Injection
Slug
ameliabooking
Published
2026-04-23
Title
Booking for Appointments and Events Calendar – Amelia < 2.2.1 - Unauthenticated Information Exposure
Slug
ameliabooking
Published
2026-04-14
Title
Amelia < 2.3 - Unauthenticated Booking Status Manipulation
Slug
ameliabooking
Published
2026-04-28
Title
Booking for Appointments and Events Calendar – Amelia < 2.2.1 - Missing Authorization