WordPress security by component

Booking for Appointments and Events Calendar – Amelia

Plugin description

Booking for Appointments and Events Calendar – Amelia is a WordPress component with 10 published CVE records in this archive. The latest tracked vulnerability was published Jun 21, 2024; the highest CVE/CNA score is 8.8.

Plugin slug: amelia

Latest vulnerability

CVE-2024-6225: Booking for Appointments and Events Calendar – Amelia: Cross-site scripting

Booking for Appointments and Events Calendar – Amelia is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedJun 21, 2024

Safe version guidanceSee mitigation notes

		Safe version
Jun 21, 2024	CVE-2024-6225 Booking for Appointments and Events Calendar – Amelia: Cross-site scripting Booking for Appointments and Events Calendar – Amelia is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE4.4 NVD4.8
Mar 13, 2024	CVE-2024-1484 Booking for Appointments and Events Calendar – Amelia: Cross-site scripting Booking for Appointments and Events Calendar – Amelia is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVD6.1
Feb 05, 2024	CVE-2023-6808 Booking for Appointments and Events Calendar – Amelia: Cross-site scripting Booking for Appointments and Events Calendar – Amelia is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVD5.4
Apr 04, 2022	CVE-2022-0837 Amelia: A security weakness Amelia is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.4 NVD5.4
Apr 04, 2022	CVE-2022-0825 Amelia: A security weakness Amelia is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.4 NVD5.4
Mar 28, 2022	CVE-2022-0720 Amelia: A security weakness Amelia is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.4 NVD5.4
Mar 23, 2022	CVE-2022-0834 Amelia: Cross-site scripting Amelia is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE7.2 NVD5.4
Mar 21, 2022	CVE-2022-0687 Amelia: A security weakness Amelia is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE8.8 NVD8.8
Mar 21, 2022	CVE-2022-0627 Amelia: Cross-site scripting Amelia is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVD6.1
Mar 21, 2022	CVE-2022-0616 Amelia: Cross-site request forgery Amelia is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVD4.3