Skip to content
OpenAdvisories

Vendor

Amelia

3 known vulnerabilities.

Products

Booking for Appointments and Events Calendar – Amelia Pro 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-116751

    Amelia Pro <= 9.9.1 - Unauthenticated SQL Injection via 'tag' Parameter Array Keys

    The Booking for Appointments and Events Calendar – Amelia Pro plugin for WordPress is vulnerable to time-based SQL Injection via the 'tag[] (array KEYS)' parameter in all versions up to, and including, 9.9.1 due to insufficient escaping on the user supplied p…

    Amelia Booking for Appointments and Events Calendar – Amelia Pro Web / CMS