CVE-2026-14215

CVE-2026-14215 affects the Booking for Appointments and Events Calendar WordPress plugin (also referred to as Amelia ) in versions prior to 2.4.9 . The root cause is a missing authentication or valid request token check before executing the post-booking action chain . An unauthenticated attacker ...

WordPress Booking for Appointments and Events Calendar plugin < 2.4.9 - Unauthenticated Post-Booking Action Trigger vulnerability

Unauthenticated Post-Booking Action Trigger vulnerability discovered by Haitam Lazaar in WordPress Plugin Amelia versions 2.4.9...