{
 "id": "WPSEC-2026-1507",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1507/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1507/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1507/index.md",
 "title": "Booking for Appointments and Events Calendar – Amelia <= 2.4.12 - Unauthenticated SQL Injection via Array Keys of Event Filter Parameters",
 "description": "The Amelia plugin for WordPress is vulnerable to SQL Injection via the array keys of event filter parameters (such as 'providers', 'locations', 'customers' and 'events') in all versions up to, and including, 2.4.12. The plugin builds SQL placeholder names from attacker-controlled array keys, and its string-substitution binding routine does not validate placeholder names, so injected key text can end up as raw SQL. This makes it possible for unauthenticated attackers to append additional SQL queries to existing queries and extract sensitive information from the database.",
 "plugin": {
  "slug": "ameliabooking",
  "name": "Booking for Appointments and Events Calendar – Amelia",
  "full_name": "Booking for Appointments and Events Calendar – Amelia",
  "wordpress_org": "https://wordpress.org/plugins/ameliabooking/",
  "advisories_url": "https://wpsec.com/vuln/plugin/ameliabooking/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/ameliabooking"
 },
 "type": "SQLI",
 "cwe": [
  "CWE-89"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 7.5,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "severity": "High"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "2.4.13",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 2.4.13"
  ]
 },
 "introduced_in": null,
 "fixed_in": "2.4.13",
 "remediation": "Update to 2.4.13 or later.",
 "fix_released": "2026-10-22T10:10:40+00:00",
 "published": "2026-10-23T10:46:09+00:00",
 "updated": "2026-10-23T07:09:29.824552+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1507/",
  "https://plugins.svn.wordpress.org/ameliabooking/tags/2.4.13/",
  "https://wordpress.org/plugins/ameliabooking/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/ameliabooking",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Low",
  "as_of": "2026-10-23"
 }
}