CVE-2026-5465 - Vulnerability Analysis

Overview

Amelia WordPress plugin <= 2.1.3 contains an insecure direct object reference caused by lack of authorization checks on the externalId field in UpdateProviderCommandHandler, letting authenticated Provider users take over any WordPress account, exploit requires Provider-level or higher access.

Severity & Score

Impact

Authenticated Provider users can take over any WordPress account, including administrators, leading to full site compromise.

Mitigation

Update to the latest version beyond 2.1.3.

References

• https://plugins.trac.wordpress.org/changeset/3499608/ameliabooking/trunk/src/Application/Commands/User/Provider/UpdateProviderCommandHandler.php
• https://www.wordfence.com/threat-intel/vulnerabilities/id/a4204099-1065-4167-8b42-3da25945236c?source=cve
• https://plugins.trac.wordpress.org/browser/ameliabooking/tags/2.1.3/src/Application/Commands/User/Provider/UpdateProviderCommandHandler.php#L146
• https://plugins.trac.wordpress.org/browser/ameliabooking/tags/2.1.3/src/Application/Commands/User/Provider/UpdateProviderCommandHandler.php#L219
• https://plugins.trac.wordpress.org/browser/ameliabooking/tags/2.1.3/src/Application/Commands/User/Provider/UpdateProviderCommandHandler.php#L239
• https://plugins.trac.wordpress.org/browser/ameliabooking/tags/2.1.3/src/Application/Controller/User/Provider/UpdateProviderController.php#L30

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Apr 7, 2026

🟠 CVE-2026-5465 - High (8.8) The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.3. This is due to the `UpdateProviderCommandHandler` failing to validate c... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-5465/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

GitHub Repositories(1 repo)

• https://github.com/kaleth4/CVE-2026-5465

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner