CVE-2026-14216 — Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch

CVE-2026-14216

Amelia < 2.4.7 - Unauthenticated Notification Queue Dispatch PUBLISHED

Description (CNA)

The Booking for Appointments and Events Calendar WordPress plugin before 2.4.7 does not require authentication before processing its pending notification queue, allowing an unauthenticated user to force the dispatch of queued notifications and integration callbacks.

Affected (CNA)

Vendor / product	Versions
Unknown / Booking for Appointments and Events Calendar	affected 0 before 2.4.7

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/c38bf5b3-902c-4126-a9a3-42d9f2d359c3/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.