Now officially on WordPress.org

CVE Database / CVE-2026-40789

CVE · High

CVE-2026-40789 — Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.2.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-40789 Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.2.1 Insertion of Sensitive Information Into Sent Data High 7.5 < 2.2.1 2.2.1 2026-04-23 —

CVE-2026-40789

All versions of the Amelia plugin for WordPress prior to version 2.3 contain a security flaw that allows unauthorized individuals to access confidential information about users or settings without needing authentication credentials. This vulnerability is present in every release up through and including version 2.2, which means any user can potentially exploit it.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings