Amelia

Products

ProductCVEsExploitedLatest
Booking for Appointments and Events Calendar – Amelia Pro3–Nov 7, 2026

Exploited and recent CVEs

  • CVE-2026-116751 High 7.5 Amelia Pro <= 9.9.1 - Unauthenticated SQL Injection via 'tag' Parameter Array Keys –
  • CVE-2024-6332 Medium 6.5 Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite <= 1.2.4 - Missing Authorization to Sensitive Information Exposure 0.4%
  • CVE-2024-6225 Medium 4.4 Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting 0.3%