Booking for Appointments and Events Calendar vulnerabilities
We track 1 vulnerability in Booking for Appointments and Events Calendar products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 12, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Booking for Appointments and Events Calendar vulnerabilities
- 7.2 High severity
Booking for Appointments and Events Calendar: Authorization Bypass Through User-Controlled Key
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10 does not verify that the user editing a customer or employee record is entitled to modify the WordPress account linked to it, allowing users holding Amelia's customer or employee m