Booking for Appointments and Events Calendar – Amelia vulnerabilities
3 known vulnerabilities in Booking for Appointments and Events Calendar – Amelia from Ameliabooking. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Booking for Appointments and Events Calendar –…: Authorization Bypass Through User-Controlled Key
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.3. This is due to the `UpdateProviderCommandHandler` failing to validate changes to the `
- 8.8 High severity
Booking for Appointments and Events Calendar –…: Improper Privilege Management
The Amelia Booking plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 9.1.2. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system res
- 7.5 High severity
Booking for Appointments and Events Calendar –…: Improper Neutralization of Special Elements used in an SQL Command
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the ‘search’ parameter in all versions up to, and including, 1.2.35 due to insufficient escaping on the user supplied parameter and lack of suffic