Skip to content
Threat Feed
Subscribe

Vendor

Amelia Booking

1 brief RSS
high advisory

Amelia Booking WordPress Plugin Insecure Direct Object Reference Vulnerability

The Amelia Booking plugin for WordPress versions 9.1.2 and earlier is vulnerable to Insecure Direct Object References (IDOR), allowing authenticated attackers with customer-level permissions or higher to change user passwords and potentially compromise administrator accounts.

Amelia Booking plugin wordpress plugin idor privilege-escalation CVE-2026-2931
2r 1t