Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

melograno vulnerabilities

10 published CVEs name melograno among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-107616

    Booking for Appointments and Events Calendar <= 9.9.1 - Missing Authorization to Unauthenticated Arbitrary Event Attendee Data Exposure via '/report/event/attendees' Endpoint

    melograno · Booking for Appointments and Events Calendar – Amelia

    High7.5
  • CVE-2026-104992

    Booking for Appointments and Events Calendar <= 9.9.1 - Missing Authorization to Authenticated (Custom+) Sensitive Information Disclosure via '/report/event/bookings' Endpoint

    melograno · Booking for Appointments and Events Calendar – Amelia

    Medium6.5
  • CVE-2026-103915

    Booking for Appointments and Events Calendar <= 2.4.12 - Unauthenticated Sensitive Information Exposure in 'page' Parameter

    melograno · Booking for Appointments and Events Calendar – Amelia

    Medium5.3
  • CVE-2026-109384

    The Innovative Form Builder <= 1.5.1 - Authenticated (Custom+) Arbitrary File Upload via 'allowedFileExtensions' Configuration + Public /form/submission/ Multipart Upload

    melograno · The Innovative Form Builder – IvyForms

    High8.8
  • CVE-2026-14311

    Booking for Appointments and Events Calendar – Amelia (Premium) <= 2.4.4 - Authenticated (Custom+) Missing Authorization to Limited Account Takeover

    melograno · Booking for Appointments and Events Calendar – Amelia

    Medium5.4
  • CVE-2026-16582

    Booking for Appointments and Events Calendar - Amelia <= 2.4.5 - Missing Authorization to Unauthenticated Payment Bypass

    melograno · Booking for Appointments and Events Calendar – Amelia

    Medium5.3
  • CVE-2026-10148

    Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' Parameter

    melograno · Booking for Appointments and Events Calendar – Amelia

    Medium6.4
  • CVE-2026-9055

    Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'

    melograno · Booking for Appointments and Events Calendar – Amelia

    Critical9.8
  • CVE-2026-6286

    Booking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission

    melograno · Booking for Appointments and Events Calendar – Amelia

    High7.2
  • CVE-2026-14782

    Booking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer Import

    melograno · Booking for Appointments and Events Calendar – Amelia

    Medium4.9
All 10 in the list