Now officially on WordPress.org

CVE Database / CVE-2025-14720

CVE · Medium

CVE-2025-14720 — Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.0.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-14720 Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.0.0 Missing Authorization Medium 5.3 < 2.0.0 2.0.0 2026-01-08 —

CVE-2025-14720

The Amelia plugin for WordPress contains a security flaw that allows unauthorized users to bypass authentication checks when accessing certain AJAX actions in versions up to 1.2.38. This vulnerability enables attackers to manipulate payment status, initiate notification sending, and retrieve sensitive debugging data without proper authorization.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings