Now officially on WordPress.org

CVE Database / CVE-2025-12482

CVE · High

CVE-2025-12482 — Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 1.2.36

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-12482 Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 1.2.36 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') High 7.5 < 1.2.36 1.2.36 2025-11-15 —

CVE-2025-12482

The Amelia plugin for WordPress, which manages appointments and events, has a security flaw in its search function. In versions up to 1.2.35, the plugin doesn't properly filter user input, allowing attackers to inject malicious SQL code into existing queries. This vulnerability enables unauthorized access to sensitive database information.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings