Vulnerability in Booking For Appointments And Events Calendar

CVE-2026-14214

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.4 does not restrict which fields can be written through its customer import, allowing a user with the Amelia Manager role to modify arbitrary columns of any stor…

Affected products

  • Unknown Booking For Appointments And Events Calendar — versions 0

References