AM
Vendor
ameliabooking
20
CVEs
0
On KEV
0
New 30D
Products
BF8.8
Booking for Appointments and Events Calendar – Amelia
ameliabooking
13 CVEs0 on KEV0 new
AM7.6
Amelia
ameliabooking
4 CVEs0 on KEV0 new
BS6.5
Booking System Trafft
ameliabooking
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-8791 | BS Booking System Trafft ameliabooking | 6.4 | Jul 29 | Booking System Trafft <= 1.0.17 - Authenticated (Subscriber+) Stored Cross-Site Scripting |
| CVE-2026-6449 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 5.3 | May 2 | Booking for Appointments and Events Calendar – Amelia <= 2.1.2 - Unauthenticated Authorization Bypass via Remote Approval Endpoint |
| CVE-2026-39487 | AM Amelia ameliabooking | 7.6 | Apr 8 | WordPress Amelia plugin <= 2.1.1 - SQL Injection vulnerability |
| CVE-2026-5465 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 8.8 | Apr 7 | Amelia <= 2.1.3 - Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' Parameter |
| CVE-2026-4668 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 6.5 | Mar 31 | Amelia <= 2.1.2 - Authenticated (Manager+) SQL Injection via 'sort' Parameter |
| CVE-2026-2931 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 8.8 | Mar 26 | Amelia Booking <= 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change |
| CVE-2026-24963 | AM Amelia ameliabooking | 7.2 | Mar 5 | WordPress Amelia plugin <= 1.2.38 - Privilege Escalation vulnerability |
| CVE-2026-24967 | AM Amelia ameliabooking | 5.3 | Feb 3 | WordPress Amelia plugin <= 1.2.38 - Broken Access Control vulnerability |
| CVE-2025-14720 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 5.3 | Jan 9 | Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Missing Authorization to Unauthenticated Multiple AJAX Actions |
| CVE-2025-12482 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 7.5 | Nov 16 | Booking for Appointments and Events Calendar – Amelia <= 1.2.35 - Unauthenticated SQL Injection via search |
| CVE-2025-58213 | BS Booking System Trafft ameliabooking | 6.5 | Aug 27 | WordPress Booking System Trafft Plugin <= 1.0.14 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-2578 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 5.3 | Mar 28 | Booking for Appointments and Events Calendar – Amelia <= 1.2.19 - Unauthenticated Full Path Disclosure |
| CVE-2025-26965 | AM Amelia ameliabooking | 5.3 | Feb 25 | WordPress Amelia plugin <= 1.2.16 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2024-11754 | BS Booking System Trafft ameliabooking | 6.4 | Dec 13 | Booking System Trafft <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2024-6332 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 6.5 | Sep 5 | Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite <= 1.2.4 - Missing Authorization to Sensitive Information Exposure |
| CVE-2024-6552 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 5.3 | Aug 8 | Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure |
| CVE-2024-6225 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 4.8 | Jun 21 | Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting |
| CVE-2024-1484 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 6.1 | Mar 13 | Booking for Appointments and Events Calendar – Amelia <= 1.0.98 - Reflected Cross-Site Scripting |
| CVE-2023-6808 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 5.4 | Feb 5 | Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode |
| CVE-2022-0834 | BF Booking for Appointments and Events Calendar – Amelia ameliabooking | 5.4 | Mar 23 | Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName |