Advisories · Technology
Booking for Appointments and Events Calendar.
Every CVE that names Booking for Appointments and Events Calendar among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover
- Booking for Appointments and Events Calendar
- Broken access control
- CVSS 5.3 Medium
Amelia Pro 9.0 - 9.8 - Unauthenticated Payment Bypass
- Booking for Appointments and Events Calendar
- Broken access control
- CVSS 6.5 Medium
Amelia < 2.4.9 - Unauthenticated Post-Booking Action Trigger
- Booking for Appointments and Events Calendar
- Broken access control
- CVSS 2.7 Low
Amelia 1.2.32 - 2.4.8 - Amelia Customer+ Appointment Status Update and Self-Approval
- Booking for Appointments and Events Calendar
- Broken access control
- CVSS 6.5 Medium
Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch
- Booking for Appointments and Events Calendar
- Authentication bypass
- CVSS 4.7 Medium
Amelia Pro < 9.8 - Provider+ Arbitrary Provider Password Update via IDOR
- Booking for Appointments and Events Calendar
- Broken access control
- CVSS 3.7 Low
Amelia < 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR
- Booking for Appointments and Events Calendar
- Broken access control
- CVSS 3.8 Low
Amelia Pro < 9.7 - Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR
- Booking for Appointments and Events Calendar
- Broken access control
- CVSS 2.7 Low
Amelia < 2.4.4 - Amelia Manager+ Arbitrary User-Field Modification via Mass Assignment
- Booking for Appointments and Events Calendar
- Authentication bypass