← WordPress Vulnerabilities
WordPress security by component

Booking for Appointments and Events Calendar – Amelia

Booking for Appointments and Events Calendar – Amelia is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 09, 2026; the highest CVE/CNA score is 7.5.

Plugin slug: booking-for-appointments-and-events-calendar-amelia

CVE-2025-14720: Booking for Appointments and Events Calendar – Amelia: A security weakness

Booking for Appointments and Events Calendar – Amelia is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJan 09, 2026
Safe version guidanceSee mitigation notes
Safe version
Jan 09, 2026 CVE-2025-14720
Booking for Appointments and Events Calendar – Amelia: A security weakness
Booking for Appointments and Events Calendar – Amelia is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Nov 16, 2025 CVE-2025-12482
Booking for Appointments and Events Calendar – Amelia: SQL injection
Booking for Appointments and Events Calendar – Amelia is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE7.5
NVDPending