BF
Product
Booking for Appointments and Events Calendar – Amelia
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 10Low 0
Watch
Add Booking for Appointments and Events Calendar – Amelia to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5465 | 8.8 | Apr 7 | Amelia <= 2.1.3 - Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' Parameter Affected: through 2.1.3 |
| CVE-2026-2931 | 8.8 | Mar 26 | Amelia Booking <= 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change Affected: through 9.1.2 |
| CVE-2025-12482 | 7.5 | Nov 16 | Booking for Appointments and Events Calendar – Amelia <= 1.2.35 - Unauthenticated SQL Injection via search Affected: through 1.2.35 |
Showing 3