Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Customer Import in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with wpamelia-manager role, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-16 | 2 | Disclosure2 |
| 2026-07-17 | 1 | Disclosure1 |
CVE-2026-14782 SQL Injection in Booking for Appointments and Events Calendar – Amelia Plugin WordPress 2.4.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-14782
Post summary
The entry announces a SQL injection vulnerability (CVE-2026-14782) affecting Amelia Plugin WordPress 2.4.3, offering basic technical details but no information on patches, PoCs, or exploitation activity.
🚨*CVE* CVE-2026-14782 The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Customer Import in all versions up to, and inclu… https://www.cve.org/CVERecord?id=CVE-2026-14782 ----- Traducción: CVE-2026-14782 El … http://infoflow.cloud`
Post summary
CVE-2026-14782 is a SQL injection flaw in the Amelia WordPress plugin’s Customer Import feature, affecting all versions up to the latest. No PoC, exploit code, or patch information is provided.
CVE-2026-14782 The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to SQL Injection via the Customer Import in all versions up to, and inclu… https://www.cve.org/CVERecord?id=CVE-2026-14782
Post summary
The post discloses that the Amelia WordPress plugin's Customer Import feature is subject to an SQL injection flaw, impacting all versions up to the indicated point.