Booking for Appointments and Events Calendar

Software Type	Plugin
Software Slug	ameliabooking (view on wordpress.org)
Software Status	Active
Software Author	ameliabooking
Software Website	wpamelia.com
Software Downloads	768,545
Software Active Installs	70,000
Software Record Last Updated	October 29, 2024

16 Vulnerabilities

Submit a Vulnerability

Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite <= 1.2.4 - Missing Authorization to Sensitive Information Exposure

6.5

CVE-2024-6332

Sep 4, 2024

Researcher: Nadim Zubidat

Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure

5.3

CVE-2024-6552

Aug 7, 2024

Researcher: stealthcopter

Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting

4.4

CVE-2024-6225

Jun 20, 2024

Researcher: Vinay Kumar

Amelia <= 1.0.95 - Cross-Site Request Forgery

4.3

CVE-2024-31425

Apr 10, 2024

Researcher: beluga

Booking for Appointments and Events Calendar – Amelia <= 1.0.98 - Reflected Cross-Site Scripting

6.1

CVE-2024-1484

Feb 29, 2024

Researcher: Muhammad Hassham Nagori

Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

6.4

CVE-2023-6808

Jan 18, 2024

Researcher: Ngô Thiên An (ancorn_)

Amelia <= 1.0.98 - Missing Authorization

6.5

CVE-2024-22298

Jan 17, 2024

Researcher: Abdi Pranata

Booking for Appointments and Events Calendar – Amelia <= 1.0.85 - Stored Cross-Site Scripting via Shortcode

6.4

CVE-2023-50860

Dec 22, 2023

Researcher: Ngô Thiên An (ancorn_)

Amelia <= 1.0.75 - Unauthenticated Reflected Cross-Site Scripting via 'code'

6.1

CVE-2023-29427

Apr 6, 2023

Researchers: minhtuanact, Gen Sato

Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure

5.4

CVE-2022-0825

Mar 14, 2022

Researcher: Huli, Cymetrics

Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam

6.4

CVE-2022-0837

Mar 14, 2022

Researcher: Huli, Cymetrics

Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName

7.2

CVE-2022-0834

Mar 2, 2022

Researcher: Vinay Kumar

Appointment and Event Booking Calendar for WordPress - Amelia < 1.0.47 - Arbitrary Booking Update and Sensitive Data Exposure

5.4

CVE-2022-0720

Mar 1, 2022

Researcher: Huli, Cymetrics

Amelia <= 1.0.46 - Cross-Site Request Forgery

4.3

CVE-2022-0616

Feb 23, 2022

Researcher: Muhamad Hidayat

Amelia <= 1.0.46 - Reflected Cross-Site Scripting

6.1

CVE-2022-0627

Feb 23, 2022

Researcher: Ran Crane

Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload

8.8

CVE-2022-0687

Feb 23, 2022

Researcher: qerogram

Title	Status	CVE ID	CVSS	Researchers	Date
Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite <= 1.2.4 - Missing Authorization to Sensitive Information Exposure	Patched	CVE-2024-6332	6.5	Nadim Zubidat	September 4, 2024
Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure	Patched	CVE-2024-6552	5.3	stealthcopter	August 7, 2024
Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting	Patched	CVE-2024-6225	4.4	Vinay Kumar	June 20, 2024
Amelia <= 1.0.95 - Cross-Site Request Forgery	Patched	CVE-2024-31425	4.3	beluga	April 10, 2024
Booking for Appointments and Events Calendar – Amelia <= 1.0.98 - Reflected Cross-Site Scripting	Patched	CVE-2024-1484	6.1	Muhammad Hassham Nagori	February 29, 2024
Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode	Patched	CVE-2023-6808	6.4	Ngô Thiên An (ancorn_)	January 18, 2024
Amelia <= 1.0.98 - Missing Authorization	Patched	CVE-2024-22298	6.5	Abdi Pranata	January 17, 2024
Booking for Appointments and Events Calendar – Amelia <= 1.0.85 - Stored Cross-Site Scripting via Shortcode	Patched	CVE-2023-50860	6.4	Ngô Thiên An (ancorn_)	December 22, 2023
Amelia <= 1.0.75 - Unauthenticated Reflected Cross-Site Scripting via 'code'	Patched	CVE-2023-29427	6.1	minhtuanact, Gen Sato	April 6, 2023
Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure	Patched	CVE-2022-0825	5.4	Huli, Cymetrics	March 14, 2022
Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam	Patched	CVE-2022-0837	6.4	Huli, Cymetrics	March 14, 2022
Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName	Patched	CVE-2022-0834	7.2	Vinay Kumar	March 2, 2022
Appointment and Event Booking Calendar for WordPress - Amelia < 1.0.47 - Arbitrary Booking Update and Sensitive Data Exposure	Patched	CVE-2022-0720	5.4	Huli, Cymetrics	March 1, 2022
Amelia <= 1.0.46 - Cross-Site Request Forgery	Patched	CVE-2022-0616	4.3	Muhamad Hidayat	February 23, 2022
Amelia <= 1.0.46 - Reflected Cross-Site Scripting	Patched	CVE-2022-0627	6.1	Ran Crane	February 23, 2022
Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload	Patched	CVE-2022-0687	8.8	qerogram	February 23, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation