CVE-2026-14216
Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch
MEDIUM 6.5EPSS 0.3%
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before processing its pending notification queue, allowing an unauthenticated user to force the dispatch of queued notifications and integration callbacks.
- Affected
- Booking for Appointments and Events Calendar
- CVSS v3.1 CNA
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L - EPSS
- 0.30% chance of exploitation in the next 30 days, 22nd percentile
- Published
- 2026-08-26
- Updated
- 2026-09-03