Booking for Appointments and Events Calendar – Amelia, CVE-2022-0616
- CVE, Research URL
- Published on
- Mar 22, 2022
- Research Description
- The Amelia WordPress plugin before 1.0.47 does not have CSRF check in place when deleting customers, which could allow attackers to make a logged in admin delete arbitrary customers via a CSRF attack
- Affected versions
-
max 1.0.47.
- Status
-
vulnerable