Amelia
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Booking for Appointments and Events Calendar – Amelia Pro | 3 | – | Nov 7, 2026 |
Exploited and recent CVEs
- CVE-2026-116751 Amelia Pro <= 9.9.1 - Unauthenticated SQL Injection via 'tag' Parameter Array Keys –
- CVE-2024-6332 Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite <= 1.2.4 - Missing Authorization to Sensitive Information Exposure 0.4%
- CVE-2024-6225 Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting 0.3%