Medium
CVE-2026-14311
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 48
Reset filters
Medium
CVE-2026-16582
Booking for Appointments and Events Calendar - Amelia <= 2.4.5 - Missing Authorization to Unauthenticated Payment Bypass
Medium
CVE-2026-77705
Booking for Appointments and Events Calendar – Amelia < 2.4.10 - Authenticated (Custom Role+) Privilege Escalation
Medium
CVE-2026-62112
Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Editor+) SQL Injection
Medium
CVE-2026-10148
Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' Parameter
Medium
CVE-2026-77689
Booking for Appointments and Events Calendar – Amelia 9.0 - 9.8.0 - Unauthenticated Payment Bypass
Critical
CVE-2026-9055
Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'
Medium
CVE-2026-14215
Booking for Appointments and Events Calendar – Amelia < 2.4.9 - Missing Authorization
Medium
CVE-2026-77704
Booking for Appointments and Events Calendar – Amelia 1.2.32 - 2.4.8 - Missing Authorization
Medium
CVE-2026-14212
Booking for Appointments and Events Calendar – Amelia 9.0 - 9.7 - Authenticated (Provider+) Arbitrary Provider Password Update
High
CVE-2026-6286
Booking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission
Medium
CVE-2026-14216
Booking for Appointments and Events Calendar – Amelia < 2.4.7 - Missing Authorization
Medium
CVE-2026-14213
Booking for Appointments and Events Calendar – Amelia < 2.4.6 - Authenticated (Custom role+) Information Exposure
Medium
CVE-2026-14211
Amelia Pro <= 9.6 - Insecure Direct Object Reference to Authenticated (Provider+) Customer Data Disclosure
Medium
CVE-2026-14214
Booking for Appointments and Events Calendar – Amelia < 2.4.4 - Missing Authorization
Medium
CVE-2026-14782
Booking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer Import
High
CVE-2026-57702
Booking for Appointments and Events Calendar – Amelia <= 2.4.2 - Unauthenticated SQL Injection
High
CVE-2026-48889
Booking for Appointments and Events Calendar – Amelia <= 2.3 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2026-6449
Booking for Appointments and Events Calendar – Amelia <= 2.2.1 - Unauthenticated Authorization Bypass via Remote Approval Endpoint
Medium
CVE-2026-40795
Booking for Appointments and Events Calendar – Amelia <= 2.2 - Missing Authorization
Medium
CVE-2026-40789
Booking for Appointments and Events Calendar – Amelia <= 2.2 - Unauthenticated Information Exposure
High
CVE-2026-5465
Amelia <= 2.1.3 - Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' Parameter
Medium
CVE-2026-4668
Amelia <= 2.1.2 - Authenticated (Manager+) SQL Injection via 'sort' Parameter
High
CVE-2026-2931
Amelia Booking 8.3 - 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.