# Booking for Appointments and Events Calendar.

Every CVE that names Booking for Appointments and Events Calendar among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover](https://agentprime.io/advisories/CVE-2026-77705.md)
  `CVE-2026-77705` · CVE record: Unknown Booking for Appointments and Events Calendar · CVSS 7.2 High · Not analysed yet · Published 12 Sept 2026 · Tags: Broken access control
- [Amelia Pro 9.0 - 9.8 - Unauthenticated Payment Bypass](https://agentprime.io/advisories/CVE-2026-77689.md)
  `CVE-2026-77689` · CVE record: Unknown Booking for Appointments and Events Calendar · CVSS 5.3 Medium · Not analysed yet · Published 12 Sept 2026 · Tags: Broken access control
- [Amelia < 2.4.9 - Unauthenticated Post-Booking Action Trigger](https://agentprime.io/advisories/CVE-2026-14215.md)
  `CVE-2026-14215` · CVE record: Unknown Booking for Appointments and Events Calendar · CVSS 6.5 Medium · Not analysed yet · Published 2 Sept 2026 · Tags: Broken access control
- [Amelia 1.2.32 - 2.4.8 - Amelia Customer+ Appointment Status Update and Self-Approval](https://agentprime.io/advisories/CVE-2026-77704.md)
  `CVE-2026-77704` · CVE record: Unknown Booking for Appointments and Events Calendar · CVSS 2.7 Low · Not analysed yet · Published 29 Aug 2026 · Tags: Broken access control
- [Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch](https://agentprime.io/advisories/CVE-2026-14216.md)
  `CVE-2026-14216` · CVE record: Unknown Booking for Appointments and Events Calendar · CVSS 6.5 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Authentication bypass
- [Amelia Pro < 9.8 - Provider+ Arbitrary Provider Password Update via IDOR](https://agentprime.io/advisories/CVE-2026-14212.md)
  `CVE-2026-14212` · CVE record: Unknown Booking for Appointments and Events Calendar · CVSS 4.7 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: Broken access control
- [Amelia < 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR](https://agentprime.io/advisories/CVE-2026-14213.md)
  `CVE-2026-14213` · CVE record: Unknown Booking for Appointments and Events Calendar · CVSS 3.7 Low · Not analysed yet · Published 13 Aug 2026 · Tags: Broken access control
- [Amelia Pro < 9.7 - Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR](https://agentprime.io/advisories/CVE-2026-14211.md)
  `CVE-2026-14211` · CVE record: Unknown Booking for Appointments and Events Calendar · CVSS 3.8 Low · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control
- [Amelia < 2.4.4 - Amelia Manager+ Arbitrary User-Field Modification via Mass Assignment](https://agentprime.io/advisories/CVE-2026-14214.md)
  `CVE-2026-14214` · CVE record: Unknown Booking for Appointments and Events Calendar · CVSS 2.7 Low · Not analysed yet · Published 1 Aug 2026 · Tags: Authentication bypass

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=booking-for-appointments-and-events-calendar>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/booking-for-appointments-and-events-calendar/>. Everything for agents: <https://agentprime.io/llms.txt>.