Overview
CVE-2025-12482 describes a critical SQL Injection vulnerability found in the Booking for Appointments and Events Calendar – Amelia plugin for WordPress. This vulnerability affects all versions up to, and including, 1.2.35. Unauthenticated attackers can exploit this flaw to inject malicious SQL queries, potentially leading to sensitive data extraction from the WordPress database. This vulnerability has been publicly disclosed and a patch is available.
Technical Details
The vulnerability resides within the handling of the ‘search’ parameter. Specifically, insufficient escaping of user-supplied input and inadequate preparation of the existing SQL query allows an attacker to append arbitrary SQL code. By crafting a malicious ‘search’ query, an attacker can manipulate the database interaction to extract information such as user credentials, customer data, and other confidential details. The vulnerability is located in the `EventRepository.php` file.
CVSS Analysis
- CVSS Score: 7.5 (HIGH)
- This score reflects the significant impact of the vulnerability, allowing unauthenticated attackers to potentially gain access to sensitive data within the WordPress database.
Possible Impact
Exploitation of CVE-2025-12482 could have severe consequences, including:
- Data Breach: Exposure of sensitive customer and administrator data, including usernames, passwords, email addresses, and booking information.
- Account Takeover: Malicious actors could potentially compromise administrator accounts, gaining full control over the WordPress website.
- Reputational Damage: A successful attack could severely damage the reputation of businesses relying on the Amelia plugin.
- Data Manipulation: Attackers might modify or delete critical business data.
Mitigation and Patch Steps
To address this critical vulnerability, users of the Amelia WordPress plugin are strongly advised to take the following steps:
- Update the Plugin: Immediately update the Amelia plugin to version 1.2.36 or later. This version contains the necessary security fix to address the SQL Injection vulnerability.
- Verify Plugin Installation: Ensure that the update has been successfully applied by checking the plugin version in the WordPress admin panel.
- Monitor Activity: Continuously monitor website activity for any suspicious behavior or unauthorized access attempts.
- Web Application Firewall (WAF): Implementing a WAF can provide an additional layer of protection by filtering malicious requests.
References
WordPress Plugin Repository Change Log
Wordfence Threat Intelligence Report
