How many CVEs does ameliabooking have?

ameliabooking has 20 published CVE records since 2022, including 13 in the last two years.

How many ameliabooking CVEs are in CISA KEV?

None of ameliabooking's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which ameliabooking products have the most CVEs?

The ameliabooking products with the most published CVEs are Booking for Appointments and Events Calendar – Amelia, Amelia, Booking System Trafft.

What are the most common weakness types in ameliabooking CVEs?

ameliabooking's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-862 (Missing Authorization), CWE-639 (Authorization Bypass Through User-Controlled Key).

What is the average severity of ameliabooking CVEs?

The average CVSS base score across ameliabooking's scored CVEs is 6.4.

RadicalNotion.AI

Log in Start free

20 CVEs

ameliabooking Vulnerabilities

Name: ameliabooking vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ameliabooking.

20

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.4

Avg CVSS

2022–2026

Overview

ameliabooking has 20 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting ameliabooking products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on ameliabooking's vulnerability posture, as a share of its 20 published CVEs.

Average CVSS: 6.4
Critical / high: 30%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 95%

Severity and exploitation

How the CVSS severity of ameliabooking's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High6

Medium14

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ameliabooking's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No ameliabooking CVEs currently have a tracked public exploit.

Most affected products

The ameliabooking products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in ameliabooking CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish ameliabooking CVE records.

Disclosure activity by year

How many ameliabooking CVEs were published each year.

2022

1

2024

6

2025

4

2026

9

Latest ameliabooking CVEs

The most recently disclosed vulnerabilities affecting ameliabooking.

Booking System Trafft <= 1.0.17 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CWE-79
Medium · CVSS 6.4
EPSS 0.2%2026-07-29
Booking for Appointments and Events Calendar – Amelia <= 2.1.2 - Unauthenticated Authorization Bypass via Remote Approval Endpoint
CWE-285
Medium · CVSS 5.3
EPSS 0.5%2026-05-02
WordPress Amelia plugin <= 2.1.1 - SQL Injection vulnerability
CWE-89
High · CVSS 7.6
EPSS 0.3%2026-04-08
Amelia <= 2.1.3 - Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' Parameter
CWE-639
High · CVSS 8.8
EPSS 0.6%2026-04-07
Amelia <= 2.1.2 - Authenticated (Manager+) SQL Injection via 'sort' Parameter
CWE-89
Medium · CVSS 6.5
EPSS 0.4%2026-03-31
Amelia Booking <= 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change
CWE-269
High · CVSS 8.8
EPSS 0.4%2026-03-26
WordPress Amelia plugin <= 1.2.38 - Privilege Escalation vulnerability
CWE-266
High · CVSS 7.2
EPSS 0.3%2026-03-05
WordPress Amelia plugin <= 1.2.38 - Broken Access Control vulnerability
CWE-862
Medium · CVSS 5.3
EPSS 0.2%2026-02-03
Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Missing Authorization to Unauthenticated Multiple AJAX Actions
CWE-862
Medium · CVSS 5.3
EPSS 0.3%2026-01-09
Booking for Appointments and Events Calendar – Amelia <= 1.2.35 - Unauthenticated SQL Injection via search
CWE-89
High · CVSS 7.5
EPSS 0.3%2025-11-16
WordPress Booking System Trafft Plugin <= 1.0.14 - Cross Site Scripting (XSS) Vulnerability
CWE-79
Medium · CVSS 6.5
EPSS 0.2%2025-08-27
Booking for Appointments and Events Calendar – Amelia <= 1.2.19 - Unauthenticated Full Path Disclosure
CWE-200
Medium · CVSS 5.3
EPSS 0.4%2025-03-28

Track new ameliabooking CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor ameliabooking CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft36,228 CVEs linux22,545 CVEs Google16,149 CVEs Apple15,070 CVEs Oracle12,706 CVEs Debian10,225 CVEs IBM8,823 CVEs Red Hat8,079 CVEs

Browse all vendors

Frequently asked questions

Common questions about ameliabooking vulnerabilities.

How many CVEs does ameliabooking have?: ameliabooking has 20 published CVE records since 2022, including 13 in the last two years.
How many ameliabooking CVEs are in CISA KEV?: None of ameliabooking's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which ameliabooking products have the most CVEs?: The ameliabooking products with the most published CVEs are Booking for Appointments and Events Calendar – Amelia, Amelia, Booking System Trafft.
What are the most common weakness types in ameliabooking CVEs?: ameliabooking's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-862 (Missing Authorization), CWE-639 (Authorization Bypass Through User-Controlled Key).
Are there public exploits for ameliabooking vulnerabilities?: No ameliabooking CVEs currently have a tracked public exploit in this dataset.
What is the average severity of ameliabooking CVEs?: The average CVSS base score across ameliabooking's scored CVEs is 6.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ameliabooking vulnerabilities

Monitor new ameliabooking vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing