CVE-2026-6449 | ameliabooking Booking for Appointments and Events Calendar Plugin Request improper authorization

A vulnerability classified as critical has been found in ameliabooking Booking for Appointments and Events Calendar Plugin up to 2.1.2 on WordPress. Affected is an unknown function of the component Request Handler. The manipulation leads to improper authorization.

This vulnerability is documented as CVE-2026-6449. The attack can be initiated remotely. There is not any exploit available.