Known vulnerabilities in Booking for Appointments and Events Calendar – Amelia
Amelia is a powerful booking plugin for appointments and events. Manage scheduling, calendars, and availability with an all-in-one booking system.
34Reported vulnerabilities
9.8Highest CVSS score
2.4.7Latest version
90,000+Active installs
What to do now
Update Booking for Appointments and Events Calendar – Amelia to 9.6.3 or later.
34 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2026-9055 | Critical | 0.3% | 8.0 to 9.6.2 (inclusive) | 9.6.3 |
September 1, 2026 |
| CVE-2026-48889 | High | 0.4% | 2.3 and earlier | 2.4 |
June 2, 2026 |
| CVE-2026-5465 | High | 0.6% | 0 to 2.1.3 (inclusive) | 2.2 |
April 7, 2026 |
| CVE-2026-2931 | High | 0.4% | 0 to 9.1.2 (inclusive) | 9.2 |
March 26, 2026 |
| CVE-2026-24963 | High | 0.3% | 1.2.38 and earlier | 2.0 |
March 4, 2026 |
| CVE-2026-57702 | High | 0.4% | 2.4.2 and earlier | 2.4.3 |
July 8, 2026 |
| CVE-2025-12482 | High | 0.3% | 0 to 1.2.35 (inclusive) | 1.2.36 |
November 16, 2025 |
| CVE-2026-6286 | High | 0.4% | 0 to 2.2 (inclusive) | 2.2.1 |
August 28, 2026 |
| CVE-2026-4668 | Medium | 0.4% | 0 to 2.1.2 (inclusive) | 2.1.3 |
April 1, 2026 |
| CVE-2026-39487 | Medium | 0.3% | 2.1.1 and earlier | 2.1.2 |
March 25, 2026 |
| CVE-2024-6332 | Medium | 0.4% | 0 to 1.2.4 (inclusive) 0 to 7.7 (inclusive) |
7.8 |
September 5, 2024 |
| CVE-2024-22298 | Medium | 0.4% | 1.0.98 and earlier | 1.0.99 |
January 17, 2024 |
| CVE-2023-50860 | Medium | 0.3% | 1.0.85 and earlier | 1.0.86 |
December 22, 2023 |
| CVE-2026-14212 | Medium | 0.3% | 9.0 to 9.7 (inclusive) | 9.8 |
August 28, 2026 |
| CVE-2023-27918 | Medium | 0.5% | Before 1.0.76 | 1.0.76 |
May 10, 2023 |
| CVE-2023-49282 | Medium | 2.2% | 1.2.18 to 1.2.36 (inclusive) | 1.2.37 |
November 18, 2025 |
| CVE-2024-1484 | Medium | 0.5% | 1.0.98 and earlier | 1.0.99 |
February 29, 2024 |
| CVE-2023-29427 | Medium | 0.4% | 1.0.75 and earlier | 1.0.76 |
April 6, 2023 |
| CVE-2023-6808 | Medium | 0.5% | 1.0.93 and earlier | 1.0.94 |
February 5, 2024 |
| CVE-2026-14216 | Medium | 0.4% | Before 2.4.7 | 2.4.7 |
August 26, 2026 |
| CVE-2026-6449 | Medium | 0.5% | 0 to 2.1.2 (inclusive) | 2.3 |
May 2, 2026 |
| CVE-2026-40789 | Medium | 0.3% | 2.2 and earlier | 2.2.1 |
April 23, 2026 |
| CVE-2026-24967 | Medium | 0.2% | 1.2.38 and earlier | 2.0 |
January 11, 2026 |
| CVE-2025-14720 | Medium | 0.3% | 0 to 1.2.38 (inclusive) | 2.0.0 |
January 9, 2026 |
| CVE-2025-2578 | Medium | 0.4% | 0 to 1.2.19 (inclusive) | 1.2.20 |
March 28, 2025 |
| CVE-2025-26965 | Medium | 0.4% | 1.2.16 and earlier | 1.2.17 |
February 23, 2025 |
| CVE-2024-6552 | Medium | 0.4% | 0 to 1.2 (inclusive) 0 to 1.2 (inclusive) |
1.2.1 |
August 8, 2024 |
| CVE-2026-14782 | Medium | 0.4% | 0 to 2.4.3 (inclusive) | 2.4.4 |
July 16, 2026 |
| CVE-2026-77704 | Medium | 0.2% | 1.2.32 to 2.4.8 (inclusive) | 2.4.9 |
August 29, 2026 |
| CVE-2026-14213 | Medium | 0.2% | Before 2.4.6 | 2.4.6 |
August 14, 2026 |
| CVE-2026-14211 | Medium | 0.2% | 9.6 and earlier | 9.7 |
August 7, 2026 |
| CVE-2026-14214 | Medium | 0.2% | Before 2.4.4 | 2.4.4 |
August 1, 2026 |
| CVE-2026-40795 | Medium | 0.3% | 2.2 and earlier | 2.2.1 |
April 28, 2026 |
| CVE-2024-31425 | Medium | 0.2% | 1.0.95 and earlier | 1.0.96 |
April 10, 2024 |