{"affected":[{"defaultStatus":"unaffected","product":"Booking for Appointments and Events Calendar – Amelia","source":"CNA: Wordfence","vendor":"melograno","versions":[{"lessThanOrEqual":"9.9.1","status":"affected","version":"9.0","versionType":"semver"}]}],"cveId":"CVE-2026-104992","cwes":["CWE-862"],"description":"The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 9.9.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with custom-level access and above, to export a full CSV of booking records for any event on the site — including attendee names, email addresses, phone numbers, booking status, number of persons, price, payment status, payment amount, and coupon codes — regardless of whether they own or participate in those events.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.5,"severity":"medium","source":"CNA: Wordfence","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},{"score":6.5,"severity":"medium","source":"NVD: security@wordfence.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1794046626550,"publishedAt":1794043546496,"references":[{"source":"CNA: Wordfence","tags":[],"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4536c41c-dc05-4384-80f4-49c3197965b1?source=cve"},{"source":"CNA: Wordfence","tags":[],"url":"https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/src/Application/Commands/Report/GetEventBookingsCommandHandler.php#L41"},{"source":"CNA: Wordfence","tags":[],"url":"https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/src/Application/Controller/Report/GetEventBookingsController.php#L36"},{"source":"CNA: Wordfence","tags":[],"url":"https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/src/Infrastructure/Routes/Report/Report.php#L42"},{"source":"CNA: Wordfence","tags":[],"url":"https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/ameliabooking.php#L1336"},{"source":"CNA: Wordfence","tags":[],"url":"https://wpamelia.com/documentation/changelog/"},{"source":"security@wordfence.com","tags":[],"url":"https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/ameliabooking.php#L1336"},{"source":"security@wordfence.com","tags":[],"url":"https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/src/Application/Commands/Report/GetEventBookingsCommandHandler.php#L41"},{"source":"security@wordfence.com","tags":[],"url":"https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/src/Application/Controller/Report/GetEventBookingsController.php#L36"},{"source":"security@wordfence.com","tags":[],"url":"https://plugins.trac.wordpress.org/browser/ameliabooking/trunk/src/Infrastructure/Routes/Report/Report.php#L42"},{"source":"security@wordfence.com","tags":[],"url":"https://wpamelia.com/documentation/changelog/"},{"source":"security@wordfence.com","tags":[],"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/4536c41c-dc05-4384-80f4-49c3197965b1?source=cve"}],"remediation":[],"revision":"808cfc167df80fbc894120d7466399e89a0d81cc57bae80501df5d689657fd82","sources":[{"modifiedAt":1794043546496,"name":"CNA: Wordfence","retrievedAt":1794046100085,"url":"https://www.cve.org/CVERecord?id=CVE-2026-104992"},{"modifiedAt":1794046626550,"name":"NVD","retrievedAt":1794053769162,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104992"}],"ssvc":null,"status":"published","title":"Booking for Appointments and Events Calendar <= 9.9.1 - Missing Authorization to Authenticated (Custom+) Sensitive Information Disclosure via '/report/event/bookings' Endpoint","updatedAt":1794053769162}