Skip to content
OpenAdvisories

Vendor

melograno

10 known vulnerabilities.

Products

Booking for Appointments and Events Calendar – Amelia 9 The Innovative Form Builder – IvyForms 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-9055 Public exploit

    Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'

    The Booking for Appointments and Events Calendar – Amelia (Premium) plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is due to insufficient validation of the attacker-controlled 'type' parameter in the customer update e…

    melograno Booking for Appointments and Events Calendar – Amelia Web / CMS