WP Clinic
Log in Sign up

CVE · High

CVE-2026-40789 — Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.2.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-40789 Booking for Appointments and Events Calendar – Amelia [ameliabooking] < 2.2.1 Insertion of Sensitive Information Into Sent Data High 7.5 < 2.2.1 2.2.1 2026-04-23

CVE-2026-40789

The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to extract sensitive user or configuration data.

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.