Now officially on WordPress.org

CVE Database / CVE-2026-24963

CVE · High

CVE-2026-24963 — Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.0

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-24963 Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.0 Incorrect Privilege Assignment High 7.2 < 2.0 2.0 2026-03-04 —

CVE-2026-24963

The Amelia plugin for WordPress, used for scheduling appointments and events, contains a vulnerability that allows authorized users with elevated permissions to gain administrative control in versions prior to 1.2.38. This flaw enables attackers with certain levels of access to assume a higher level of authority within the system.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings