Amelia Pro 9.0 - 9.8 - Unauthenticated Payment Bypass

Description

The plugin does not verify that a payment was actually taken before recording a booking as paid, trusting the payment gateway named in a public, unauthenticated booking request even when the site has never configured that gateway. This lets an unauthenticated attacker obtain confirmed, fully paid appointments and events without any payment being collected.