BF
Product
Booking for Appointments and Events Calendar
9
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 4
Watch
Add Booking for Appointments and Events Calendar to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77705 | 7.2 | Sep 12 | Amelia < 2.4.10 - Amelia Manager+ WordPress Account Takeover Affected: before 2.4.10 |
| CVE-2026-14215 | 6.5 | Sep 2 | Amelia < 2.4.9 - Unauthenticated Post-Booking Action Trigger Affected: before 2.4.9 |
| CVE-2026-14216 | 6.5 | Aug 26 | Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch Affected: before 2.4.7 |
| CVE-2026-77689 | 5.3 | Sep 12 | Amelia Pro 9.0 - 9.8 - Unauthenticated Payment Bypass Affected: 9.0 before 9.8.1 |
| CVE-2026-14212 | 4.7 | Aug 26 | Amelia Pro < 9.8 - Provider+ Arbitrary Provider Password Update via IDOR Affected: 9.0 before 9.8 |
| CVE-2026-14211 | 3.8 | Aug 10 | Amelia Pro < 9.7 - Provider+ Arbitrary Customer Data Disclosure and Modification via IDOR Affected: 9.0 before 9.7 |
| CVE-2026-14213 | 3.7 | Aug 13 | Amelia < 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR Affected: before 2.4.6 |
| CVE-2026-77704 | 2.7 | Aug 29 | Amelia 1.2.32 - 2.4.8 - Amelia Customer+ Appointment Status Update and Self-Approval Affected: 1.2.32 before 2.4.9 |
| CVE-2026-14214 | 2.7 | Aug 1 | Amelia < 2.4.4 - Amelia Manager+ Arbitrary User-Field Modification via Mass Assignment Affected: before 2.4.4 |
Showing 9