Skip to content
PluginCanary

Booking for Appointments and Events Calendar - Amelia

by Melograno Venture Studio · 90,000+ active installs · Checked 3 Nov 2026
Avoid1 Critical20 Warnings

Avoid: vulnerability published 7 Aug 2026 still has no fix after 14 days.

39/ 100 Canary Score

Capped at 39 while a vulnerability has no patch.

Sub-scores for Booking for Appointments and Events Calendar - Amelia
Ownership100
Maintenance100
Security0
Support86
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • CriticalSEC-2Vulnerability published 7 Aug 2026 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.21 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 30 Oct 2026, fixed in 2.4.13. Update to version 2.4.13 or later.30 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 26 Oct 2026, fixed in 2.4.11. Update to version 2.4.11 or later.26 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 26 Oct 2026, fixed in 2.4.13. Update to version 2.4.13 or later.26 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 20 Oct 2026, fixed in 2.4.12. Update to version 2.4.12 or later.20 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 2.4.11. Update to version 2.4.11 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 2.4.11. Update to version 2.4.11 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 2 Oct 2026, fixed in 2.4.11. Update to version 2.4.11 or later.2 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 17 Sep 2026, fixed in 2.4.5. Update to version 2.4.5 or later.17 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 17 Sep 2026, fixed in 2.4.6. Update to version 2.4.6 or later.17 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 14 Sep 2026, fixed in 2.4.10. Update to version 2.4.10 or later.14 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 11 Sep 2026, fixed in 2.4.10. Update to version 2.4.10 or later.11 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 11 Sep 2026, fixed in 2.4.10. Update to version 2.4.10 or later.11 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 10 Sep 2026, fixed in 9.8.1. Update to version 9.8.1 or later.10 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 1 Sep 2026, fixed in 9.6.3. Update to version 9.6.3 or later.1 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 31 Aug 2026, fixed in 2.4.9. Update to version 2.4.9 or later.31 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 29 Aug 2026, fixed in 2.4.9. Update to version 2.4.9 or later.29 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 28 Aug 2026, fixed in 9.8. Update to version 9.8 or later.28 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 27 Aug 2026, fixed in 2.2.1. Update to version 2.2.1 or later.27 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 26 Aug 2026, fixed in 2.4.7. Update to version 2.4.7 or later.26 Aug 2026Evidence
  • WarningSEC-1Vulnerability published 14 Aug 2026, fixed in 2.4.6. Update to version 2.4.6 or later.14 Aug 2026Evidence
  • InfoSEC-339 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master7 Dec 2018 to 7 Dec 2018, 1 commits
ameliabooking10 Dec 2018 to 27 Oct 2026, 291 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
8 days ago
Releases, 24 months
54
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Booking for Appointments and Events Calendar - Amelia
Q1 20240
Q2 20241
Q3 20248
Q4 20248
Q1 20257
Q2 20256
Q3 20257
Q4 20256
Q1 20265
Q2 20267
Q3 20268
Q4 20263

Last release 27 Oct 2026. Tested with WordPress 7.1 (current).

Support

86% of 7 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
30 Oct 2026Booking for Appointments and Events Calendar <= 2.4.12 - Unauthenticated Sensitive Information Exposure in 'page' Parameter5.3<= 2.4.122.4.130
26 Oct 2026Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Missing Authorization5.3<= 2.4.102.4.110
26 Oct 2026Booking for Appointments and Events Calendar – Amelia <= 2.4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.4.122.4.130
20 Oct 2026Booking for Appointments and Events Calendar – Amelia <= 2.4.11 - Unauthenticated SQL Injection7.5<= 2.4.112.4.120
13 Oct 2026Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Unauthenticated SQL Injection7.5<= 2.4.102.4.110
13 Oct 2026Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Missing Authorization5.3<= 2.4.102.4.110
2 Oct 2026Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Missing Authorization5.3<= 2.4.102.4.110
17 Sep 2026Booking for Appointments and Events Calendar – Amelia (Premium) <= 2.4.4 - Authenticated (Custom+) Missing Authorization to Limited Account Takeover5.4<= 2.4.42.4.50
17 Sep 2026Booking for Appointments and Events Calendar - Amelia <= 2.4.5 - Missing Authorization to Unauthenticated Payment Bypass5.3<= 2.4.52.4.60
14 Sep 2026Booking for Appointments and Events Calendar – Amelia < 2.4.10 - Authenticated (Custom Role+) Privilege Escalation6.3< 2.4.102.4.100
11 Sep 2026Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Editor+) SQL Injection4.9<= 2.4.92.4.100
11 Sep 2026Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' Parameter6.4<= 2.4.92.4.100
10 Sep 2026Booking for Appointments and Events Calendar – Amelia 9.0 - 9.8.0 - Unauthenticated Payment Bypass5.39.0 to 9.8.09.8.1n/a
1 Sep 2026Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'9.88.0 to 9.6.29.6.3n/a
31 Aug 2026Booking for Appointments and Events Calendar – Amelia < 2.4.9 - Missing Authorization5.3< 2.4.92.4.90
29 Aug 2026Booking for Appointments and Events Calendar – Amelia 1.2.32 - 2.4.8 - Missing Authorization4.31.2.32 to 2.4.82.4.90
28 Aug 2026Booking for Appointments and Events Calendar – Amelia 9.0 - 9.7 - Authenticated (Provider+) Arbitrary Provider Password Update6.39.0 to 9.79.8n/a
27 Aug 2026Booking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission7.2<= 2.22.2.10
26 Aug 2026Booking for Appointments and Events Calendar – Amelia < 2.4.7 - Missing Authorization5.3< 2.4.72.4.70
14 Aug 2026Booking for Appointments and Events Calendar – Amelia < 2.4.6 - Authenticated (Custom role+) Information Exposure4.3< 2.4.62.4.60
7 Aug 2026Amelia Pro <= 9.6 - Insecure Direct Object Reference to Authenticated (Provider+) Customer Data Disclosure4.3<= 9.6No fixn/a
1 Aug 2026Booking for Appointments and Events Calendar – Amelia < 2.4.4 - Missing Authorization4.3< 2.4.42.4.40
16 Jul 2026Booking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer Import4.9<= 2.4.32.4.40
8 Jul 2026Booking for Appointments and Events Calendar – Amelia <= 2.4.2 - Unauthenticated SQL Injection7.5<= 2.4.22.4.30
2 Jun 2026Booking for Appointments and Events Calendar – Amelia <= 2.3 - Authenticated (Subscriber+) Privilege Escalation8.8<= 2.32.40

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Booking for Appointments and Events Calendar - Amelia
Q2 20264.1
Q3 20264.3
Q4 20265.0

Average rating rose from 4.1 to 5.0 between Q2 2026 and Q4 2026.

Rating distribution
5 star678
4 star30
3 star12
2 star15
1 star58
Latest low reviews

Momentum

90,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Booking for Appointments and Events Calendar - Amelia
4 May 20261,778
11 May 20263,403
18 May 202617,304
25 May 20263,919
1 Jun 202615,342
8 Jun 20264,598
15 Jun 202614,243
22 Jun 20265,020
29 Jun 202615,551
6 Jul 202617,354
13 Jul 20264,659
20 Jul 202615,864
27 Jul 20263,500
3 Aug 20264,258
10 Aug 202627,505
17 Aug 202617,103
24 Aug 202615,340
31 Aug 20265,548
7 Sep 202615,267
14 Sep 20265,716
21 Sep 202614,115
28 Sep 20264,777
5 Oct 20265,679
12 Oct 20265,071
19 Oct 202627,085
26 Oct 202620,132
2 Nov 2026826

Weekly downloads over the last 4 weeks are 23% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SimplyBook.me - Booking and reservations calendarScore 91 · 30,000+MotoPress Hotel Booking for ElementorScore 91 · 10,000+MotoPress Hotel Booking Styles & TemplatesScore 91 · 10,000+SetmoreScore 91 · 4,000+Zenchef widget integrationScore 91 · 2,000+

Facts

Version2.4.14
AuthorMelograno Venture Studio
Added11 Dec 2018
Last updated27 Oct 2026
Active installs90,000+
Requires WordPress6.5
Tested up to7.1.4
Requires PHP7.4
CategoryBookings & Scheduling > Appointment Scheduling
Tagsbooking, wpamelia, appointments, booking system, event booking system

Other plugins by this author: wpDataTables - WordPress Data Table, Dynamic Tables & Table Charts Plugin, The Innovative Form Builder - IvyForms, wpDataTables integration for Forminator Forms, Booking System Trafft

Questions

Is Booking for Appointments and Events Calendar - Amelia still maintained?

Booking for Appointments and Events Calendar - Amelia was last updated on 27 Oct 2026. Its Canary status is Avoid.

Is Booking for Appointments and Events Calendar - Amelia safe?

Booking for Appointments and Events Calendar - Amelia has 1 published vulnerability with no patched version. Its Canary status is Avoid.

Who owns Booking for Appointments and Events Calendar - Amelia?

The wordpress.org author is Melograno Venture Studio. Recent committers: ameliabooking, plugin-master. We have recorded no ownership change.

What can I use instead of Booking for Appointments and Events Calendar - Amelia?

Plugins in the same category with a higher Canary Score: SimplyBook.me - Booking and reservations calendar, MotoPress Hotel Booking for Elementor, MotoPress Hotel Booking Styles & Templates, Setmore, Zenchef widget integration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue