Medium
CVE-2026-39487
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 48
Reset filters
High
CVE-2026-24963
Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Authenticated (Employee+) Privilege Escalation
Medium
CVE-2026-24967
Amelia <= 1.2.38 - Missing Authorization
Medium
CVE-2025-14720
Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Missing Authorization to Unauthenticated Multiple AJAX Actions
High
CVE-2025-12482
Booking for Appointments and Events Calendar – Amelia <= 1.2.35 - Unauthenticated SQL Injection via search
Medium
CVE-2025-2578
Booking for Appointments and Events Calendar – Amelia <= 1.2.19 - Unauthenticated Full Path Disclosure
Medium
CVE-2025-26965
Amelia <= 1.2.16 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2024-6332
Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite <= 1.2.4 - Missing Authorization to Sensitive Information Exposure
Medium
CVE-2024-6552
Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure
Medium
CVE-2024-6225
Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-31425
Amelia <= 1.0.95 - Cross-Site Request Forgery
Medium
CVE-2024-1484
Booking for Appointments and Events Calendar – Amelia <= 1.0.98 - Reflected Cross-Site Scripting
Medium
CVE-2023-6808
Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2024-22298
Amelia <= 1.0.98 - Missing Authorization
Medium
CVE-2023-50860
Booking for Appointments and Events Calendar – Amelia <= 1.0.85 - Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-49282
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2023-29427
Amelia <= 1.0.75 - Unauthenticated Reflected Cross-Site Scripting via 'code'
Medium
CVE-2022-0837
Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam
Medium
CVE-2022-0825
Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure
High
CVE-2022-0834
Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName
Medium
CVE-2022-0720
Appointment and Event Booking Calendar for WordPress - Amelia < 1.0.47 - Arbitrary Booking Update and Sensitive Data Exposure
High
CVE-2022-0687
Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload
Medium
CVE-2022-0627
Amelia <= 1.0.46 - Reflected Cross-Site Scripting
Medium
CVE-2022-0616
Amelia <= 1.0.46 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.