BF
Product
Booking for Appointments and Events Calendar – Amelia
7
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 5Low 0
Watch
Add Booking for Appointments and Events Calendar – Amelia to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-10148 | 6.4 | Sep 12 | Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' Parameter Affected: through 2.4.9 |
| CVE-2026-14311 | 5.4 | Sep 17 | Booking for Appointments and Events Calendar – Amelia (Premium) <= 2.4.4 - Authenticated (Custom+) Missing Authorization to Limited Account Takeover Affected: through 2.4.4 |
| CVE-2026-103915 New | 5.3 | Oct 31 | Booking for Appointments and Events Calendar <= 2.4.12 - Unauthenticated Sensitive Information Exposure in 'page' Parameter Affected: through 2.4.12 |
| CVE-2026-16582 | 5.3 | Sep 17 | Booking for Appointments and Events Calendar - Amelia <= 2.4.5 - Missing Authorization to Unauthenticated Payment Bypass Affected: through 2.4.5 |
| CVE-2026-14782 | 4.9 | Jul 16 | Booking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer Import Affected: through 2.4.3 |
Showing 5