Booking for Appointments and Events Calendar – Amelia

Reviewers are consistently happy with Amelia's booking depth and fast, friendly support, though several say it's complex to configure and takes real effort to set up.

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

575 searches this plugin appeared in over the last 90 days, 20 listed. 462 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 59% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 14 months ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

1. ★★★★★ mgimenez27

   4mo ago

   Excellent plugin and world-class customer support! I’ve been a customer since 2022 and recently upgraded to the Elite Unlimited Lifetime plan. The software is robust, reliable, and perfect for managing bookings. Beyond the technical quality, the human side of their support team is incredible. Nikola was extremely empathetic, kind, and helpful in resolving my billing adjustments during a difficult personal transition. I highly recommend Amelia to any developer or business owner!

   Read on wp.org ↗
2. ★★★★★ Senh

   4mo ago

   We’ve tested lots of WP booking plugins – probably all of them… Amelia is the only plugin that meets our requirements. Yes, it’s complex to configure, but booking appointments for several staff members, different services and time slots is inherently complex. Amelia handles this complexity brilliantly and has integrated all the necessary features in a very stable way. The support was also good when we had a question – in the end, the problem was sorted simply by changing a setting. So it wasn’t a technical issue, but a mistake on our part. My assessment is based on 10 years’ experience of Drupal development and configuration for a number of clients

   Read on wp.org ↗
3. ★★★★★ leonyoram

   4mo ago

   I’ve been really happy with Amelia so far. It gives a lot of freedom to build your own booking pages with the available shortcodes, and everything looks clean and professional, especially on mobile. The support team is absolutely great—they are incredibly fast-reacting and highly responsive. They reply quickly, are extremely friendly, and actually listen to feature requests, which is something I really appreciate. As a Dutch business, the iDEAL integration was a big reason for choosing Amelia, so I’m very happy they support it. Overall, it’s a flexible booking system with a team that really seems to care about improving the product. Love working with you guys! I have a license for multiple sites and am very happy with that!

   Read on wp.org ↗
4. ★★★★★ evanclick2017

   4mo ago

   We have used Amelia booking for nearly 10 years now on one of our websites. The plugin offers a lot of customization, useful tools like SMS features, and is easy to use. Plus, it works very well with the Divi theme builder that we use. Highly recommend!

   Read on wp.org ↗
5. ★★★★★ latilola

   4mo ago

   I’ve been really happy with Amelia so far. It gives a lot of freedom to build your own booking pages with the available shortcodes, and everything looks clean and professional, especially on mobile. The support team is also great—they reply quickly, are friendly, and actually listen to feature requests, which is something I really appreciate. As a Dutch business, the iDEAL integration was a big reason for choosing Amelia, so I’m very happy they support it. Overall, it’s a flexible booking system with a team that really seems to care about improving the product. Love working with you guys, I have a license for multiple sites and am very happy with that!

   Read on wp.org ↗
6. ★★★★★ robertstaddon

   4mo ago

   This plugin covers a wide variety of applications, balancing deep customization options with fantastic out-of-the-box functionality. The support team is responsive and the developers are consistently improving the plugin. This is a great choice for just about any kind of bookings need that a client might have!

   Read on wp.org ↗
7. ★★★★★ david974

   5mo ago

   I’ve been using Amelia Booking for over 4 years and I’m very happy with it. It’s a solid and dependable plugin that makes managing appointments and events much easier. The system is stable, the interface is user-friendly, and it has all the features I need on a daily basis. I’ve had very few issues over the years, and when I did need help, the support was responsive. A great solution if you’re looking for a professional booking plugin.

   Read on wp.org ↗
8. ★★★★★ collegiideveloper

   5mo ago

   Great plugin!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.1 v2.2 * Feature: Calendar Block Time – Added the ability to quickly block one or more time slots directly from the calendar, preventing new bookings for the employee while keeping blocked periods distinct from regular app 2.1
2. — Version 2.38 V1.2.37 * BugFix: Fixed issue CVE-2023-49282 * Other small bug fixes and stability improvements V1.2.36 * Feature: ApplePay via Square – Expanded payment options through Square integration for greater flexibility * Impro 2.38
3. — Version 2.35 V1.2.34 * Fixed issue with visible Employee Selection on Customize page, Step by step list layout * Small bug fixes and stability improvements 2.35
4. — Version 2.33 V1.2.32 * BugFix: Fixed issue with additional white space on the Events form on smaller/mobile screen * BugFix: Fixed issue with pagination on the Events list form * BugFix: Fixed issue with keyboard navigation on Step-b 2.33
5. — Version 2.31 V1.2.30 * BugFix: Fixed issue with the drawer not opening when duplicating the event * Other small bug fixes and stability improvements V1.2.29 * Feature: GooglePay via Square – Expanded payment options through Square in 2.31
6. — Version 2.28 V1.2.27 * Improvement: Added Company VAT number as notification placeholder * BugFix: Fixed issue with customers booking the same appointment when rescheduling * BugFix: Fixed issue with dates for the Event closes on opt 2.28

1 open vulnerability affects the current version (2.4.14). 54 of 55 disclosed are patched.

1. Patched Medium · 5.3 Booking for Appointments and Events Calendar <= 2.4.12 - Unauthenticated Sensitive Information Exposure in 'page' Parameter ↗
   2026-10-30 CVE-2026-103915 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.4.12 Patched in 2.4.13
2. Patched Medium · 5.3 Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Missing Authorization ↗
   2026-10-26 CVE-2026-116388 Missing Authorization Affects <= 2.4.10 Patched in 2.4.11
3. Patched Medium · 6.4 Booking for Appointments and Events Calendar – Amelia <= 2.4.12 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-10-26 CVE-2026-116396 Improper Neutralization of Input During Web Page Generation Affects <= 2.4.12 Patched in 2.4.13
4. Patched High · 7.5 Booking for Appointments and Events Calendar – Amelia <= 2.4.11 - Unauthenticated SQL Injection ↗
   2026-10-20 CVE-2026-112327 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.4.11 Patched in 2.4.12
5. Patched High · 7.5 Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Unauthenticated SQL Injection ↗
   2026-10-13 CVE-2026-108497 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.4.10 Patched in 2.4.11
6. Patched Medium · 5.3 Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Missing Authorization ↗
   2026-10-13 CVE-2026-109684 Missing Authorization Affects <= 2.4.10 Patched in 2.4.11
7. Patched Medium · 5.3 Booking for Appointments and Events Calendar – Amelia <= 2.4.10 - Missing Authorization ↗
   2026-10-02 CVE-2026-96461 Missing Authorization Affects <= 2.4.10 Patched in 2.4.11
8. Patched Medium · 5.4 Booking for Appointments and Events Calendar – Amelia (Premium) <= 2.4.4 - Authenticated (Custom+) Missing Authorization to Limited Account Takeover ↗
   2026-09-17 CVE-2026-14311 Missing Authorization Affects <= 2.4.4 Patched in 2.4.5
9. Patched Medium · 5.3 Booking for Appointments and Events Calendar - Amelia <= 2.4.5 - Missing Authorization to Unauthenticated Payment Bypass ↗
   2026-09-17 CVE-2026-16582 Missing Authorization Affects <= 2.4.5 Patched in 2.4.6
10. Patched Medium · 6.3 Booking for Appointments and Events Calendar – Amelia < 2.4.10 - Authenticated (Custom Role+) Privilege Escalation ↗
    2026-09-14 CVE-2026-77705 Improper Privilege Management Affects < 2.4.10 Patched in 2.4.10
11. Patched Medium · 6.4 Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'load_manually' Parameter ↗
    2026-09-11 CVE-2026-10148 Improper Neutralization of Input During Web Page Generation Affects <= 2.4.9 Patched in 2.4.10
12. Patched Medium · 4.9 Booking for Appointments and Events Calendar – Amelia <= 2.4.9 - Authenticated (Editor+) SQL Injection ↗
    2026-09-11 CVE-2026-62112 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.4.9 Patched in 2.4.10
13. Patched Medium · 5.3 Booking for Appointments and Events Calendar – Amelia 9.0 - 9.8.0 - Unauthenticated Payment Bypass ↗
    2026-09-10 CVE-2026-77689 Client-Side Enforcement of Server-Side Security Affects 9.0 - 9.8.0 Patched in 9.8.1
14. Patched Critical · 9.8 Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId' ↗
    2026-09-01 CVE-2026-9055 Improper Privilege Management Affects 8.0 - 9.6.2 Patched in 9.6.3
15. Patched Medium · 5.3 Booking for Appointments and Events Calendar – Amelia < 2.4.9 - Missing Authorization ↗
    2026-08-31 CVE-2026-14215 Missing Authorization Affects < 2.4.9 Patched in 2.4.9
16. Patched Medium · 4.3 Booking for Appointments and Events Calendar – Amelia 1.2.32 - 2.4.8 - Missing Authorization ↗
    2026-08-29 CVE-2026-77704 Missing Authorization Affects 1.2.32 - 2.4.8 Patched in 2.4.9
17. Patched Medium · 6.3 Booking for Appointments and Events Calendar – Amelia 9.0 - 9.7 - Authenticated (Provider+) Arbitrary Provider Password Update ↗
    2026-08-28 CVE-2026-14212 Authorization Bypass Through User-Controlled Key Affects 9.0 - 9.7 Patched in 9.8
18. Patched High · 7.2 Booking for Appointments and Events Calendar <= 2.2 - Unauthenticated Stored Cross-Site Scripting via Customer Name Fields in Booking Submission ↗
    2026-08-27 CVE-2026-6286 Improper Neutralization of Input During Web Page Generation Affects <= 2.2 Patched in 2.2.1
19. Patched Medium · 5.3 Booking for Appointments and Events Calendar – Amelia < 2.4.7 - Missing Authorization ↗
    2026-08-26 CVE-2026-14216 Missing Authentication for Critical Functionality Affects < 2.4.7 Patched in 2.4.7
20. Patched Medium · 4.3 Booking for Appointments and Events Calendar – Amelia < 2.4.6 - Authenticated (Custom role+) Information Exposure ↗
    2026-08-14 CVE-2026-14213 Exposure of Sensitive Information to an Unauthorized Actor Affects < 2.4.6 Patched in 2.4.6
21. Open Medium · 4.3 Amelia Pro <= 9.6 - Insecure Direct Object Reference to Authenticated (Provider+) Customer Data Disclosure ↗
    2026-08-07 CVE-2026-14211 Authorization Bypass Through User-Controlled Key Affects <= 9.6 Patched in 9.7
22. Patched Medium · 4.3 Booking for Appointments and Events Calendar – Amelia < 2.4.4 - Missing Authorization ↗
    2026-08-01 CVE-2026-14214 Missing Authorization Affects < 2.4.4 Patched in 2.4.4
23. Patched Medium · 4.9 Booking for Appointments and Events Calendar – Amelia <= 2.4.3 - Authenticated (Custom+) SQL Injection via Customer Import ↗
    2026-07-16 CVE-2026-14782 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.4.3 Patched in 2.4.4
24. Patched High · 7.5 Booking for Appointments and Events Calendar – Amelia <= 2.4.2 - Unauthenticated SQL Injection ↗
    2026-07-08 CVE-2026-57702 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.4.2 Patched in 2.4.3
25. Patched High · 8.8 Booking for Appointments and Events Calendar – Amelia <= 2.3 - Authenticated (Subscriber+) Privilege Escalation ↗
    2026-06-02 CVE-2026-48889 Improper Privilege Management Affects <= 2.3 Patched in 2.4
26. Patched Medium · 5.3 Booking for Appointments and Events Calendar – Amelia <= 2.2.1 - Unauthenticated Authorization Bypass via Remote Approval Endpoint ↗
    2026-05-01 CVE-2026-6449 Improper Authorization Affects <= 2.2.1 Patched in 2.3
27. Patched Medium · 4.3 Booking for Appointments and Events Calendar – Amelia <= 2.2 - Missing Authorization ↗
    2026-04-28 CVE-2026-40795 Missing Authorization Affects <= 2.2 Patched in 2.2.1
28. Patched Medium · 5.3 Booking for Appointments and Events Calendar – Amelia <= 2.2 - Unauthenticated Information Exposure ↗
    2026-04-23 CVE-2026-40789 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.2 Patched in 2.2.1
29. Patched High · 8.8 Amelia <= 2.1.3 - Insecure Direct Object Reference to Authenticated (Employee+) Privilege Escalation via 'externalId' Parameter ↗
    2026-04-06 CVE-2026-5465 Authorization Bypass Through User-Controlled Key Affects <= 2.1.3 Patched in 2.2
30. Patched Medium · 6.5 Amelia <= 2.1.2 - Authenticated (Manager+) SQL Injection via 'sort' Parameter ↗
    2026-03-31 CVE-2026-4668 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.1.2 Patched in 2.1.3
31. Patched High · 8.8 Amelia Booking 8.3 - 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change ↗
    2026-03-25 CVE-2026-2931 Improper Privilege Management Affects 8.3 - 9.1.2 Patched in 9.2
32. Patched Medium · 6.5 Amelia <= 2.1.1 - Authenticated (Custom role+) SQL Injection ↗
    2026-03-25 CVE-2026-39487 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.1.1 Patched in 2.1.2
33. Patched High · 8.8 Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Authenticated (Employee+) Privilege Escalation ↗
    2026-03-04 CVE-2026-24963 Incorrect Privilege Assignment Affects <= 1.2.38 Patched in 2.0
34. Patched Medium · 5.3 Amelia <= 1.2.38 - Missing Authorization ↗
    2026-01-11 CVE-2026-24967 Missing Authorization Affects <= 1.2.38 Patched in 2.0
35. Patched Medium · 5.3 Booking for Appointments and Events Calendar – Amelia <= 1.2.38 - Missing Authorization to Unauthenticated Multiple AJAX Actions ↗
    2026-01-08 CVE-2025-14720 Missing Authorization Affects <= 1.2.38 Patched in 2.0.0
36. Patched Medium · 5.3 Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure ↗
    2025-11-18 CVE-2023-49282 Exposure of Sensitive Information to an Unauthorized Actor Affects 1.2.18 - 1.2.36 Patched in 1.2.37
37. Patched High · 7.5 Booking for Appointments and Events Calendar – Amelia <= 1.2.35 - Unauthenticated SQL Injection via search ↗
    2025-11-15 CVE-2025-12482 Improper Neutralization of Special Elements used in an SQL Command Affects <= 1.2.35 Patched in 1.2.36
38. Patched Medium · 5.3 Booking for Appointments and Events Calendar – Amelia <= 1.2.19 - Unauthenticated Full Path Disclosure ↗
    2025-03-27 CVE-2025-2578 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.2.19 Patched in 1.2.20
39. Patched Medium · 5.3 Amelia <= 1.2.16 - Unauthenticated Insecure Direct Object Reference ↗
    2025-02-23 CVE-2025-26965 Authorization Bypass Through User-Controlled Key Affects <= 1.2.16 Patched in 1.2.17
40. Patched Medium · 6.5 Booking for Appointments and Events Calendar – Amelia Premium <= 7.7 and Lite <= 1.2.4 - Missing Authorization to Sensitive Information Exposure ↗
    2024-09-04 CVE-2024-6332 Missing Authorization Affects <= 1.2.4 Patched in 1.2.5
41. Patched Medium · 5.3 Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure ↗
    2024-08-07 CVE-2024-6552 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.2 Patched in 1.2.1
42. Patched Medium · 4.4 Amelia <= 1.1.5 & Amelia (Pro) <= 7.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2024-06-20 CVE-2024-6225 Improper Neutralization of Input During Web Page Generation Affects <= 1.1.5 Patched in 1.1.6
43. Patched Medium · 4.3 Amelia <= 1.0.95 - Cross-Site Request Forgery ↗
    2024-04-10 CVE-2024-31425 Cross-Site Request Forgery Affects <= 1.0.95 Patched in 1.0.96
44. Patched Medium · 6.1 Booking for Appointments and Events Calendar – Amelia <= 1.0.98 - Reflected Cross-Site Scripting ↗
    2024-02-29 CVE-2024-1484 Improper Neutralization of Input During Web Page Generation Affects <= 1.0.98 Patched in 1.0.99
45. Patched Medium · 6.4 Booking for Appointments and Events Calendar – Amelia <= 1.0.93 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode ↗
    2024-01-18 CVE-2023-6808 Improper Neutralization of Input During Web Page Generation Affects <= 1.0.93 Patched in 1.0.94
46. Patched Medium · 6.5 Amelia <= 1.0.98 - Missing Authorization ↗
    2024-01-17 CVE-2024-22298 Missing Authorization Affects <= 1.0.98 Patched in 1.0.99
47. Patched Medium · 6.4 Booking for Appointments and Events Calendar – Amelia <= 1.0.85 - Stored Cross-Site Scripting via Shortcode ↗
    2023-12-22 CVE-2023-50860 Improper Neutralization of Input During Web Page Generation Affects <= 1.0.85 Patched in 1.0.86
48. Patched Medium · 6.1 Amelia <= 1.0.75 - Unauthenticated Reflected Cross-Site Scripting via 'code' ↗
    2023-04-06 CVE-2023-29427 Improper Neutralization of Input During Web Page Generation Affects <= 1.0.75 Patched in 1.0.76
49. Patched Medium · 5.4 Appointment and Event Booking Calendar for WordPress – Amelia < 1.0.49 - Arbitrary Booking Update and Sensitive Data Exposure ↗
    2022-03-14 CVE-2022-0825 Incorrect Authorization Affects < 1.0.49 Patched in 1.0.49
50. Patched Medium · 6.4 Appointment and Event Booking Calendar for WordPress – Amelia <= 1.0.47 - Information Disclosure and SMS Spam ↗
    2022-03-14 CVE-2022-0837 Incorrect Authorization Affects < 1.0.48 Patched in 1.0.48
51. Patched High · 7.2 Amelia <= 1.0.46 - Stored Cross Site Scripting via lastName ↗
    2022-03-02 CVE-2022-0834 Improper Neutralization of Input During Web Page Generation Affects <= 1.0.46 Patched in 1.0.47
52. Patched Medium · 5.4 Appointment and Event Booking Calendar for WordPress - Amelia < 1.0.47 - Arbitrary Booking Update and Sensitive Data Exposure ↗
    2022-03-01 CVE-2022-0720 Incorrect Authorization Affects < 1.0.47 Patched in 1.0.47
53. Patched Medium · 4.3 Amelia <= 1.0.46 - Cross-Site Request Forgery ↗
    2022-02-23 CVE-2022-0616 Cross-Site Request Forgery Affects <= 1.0.46 Patched in 1.0.47
54. Patched Medium · 6.1 Amelia <= 1.0.46 - Reflected Cross-Site Scripting ↗
    2022-02-23 CVE-2022-0627 Improper Neutralization of Input During Web Page Generation Affects <= 1.0.46 Patched in 1.0.47
55. Patched High · 8.8 Appointment and Event Booking Calendar - Amelia < 1.0.47 - Arbitrary File Upload ↗
    2022-02-23 CVE-2022-0687 Unrestricted Upload of File with Dangerous Type Affects < 1.0.47 Patched in 1.0.47

Translated into 20 languages, 10 at 90% or more

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-09-01 80K+ → 90K+ up after 198 days in tier
2. 2025-02-15 70K+ → 80K+ up after 229 days in tier
3. 2024-07-01 60K+ → 70K+ up after 250 days in tier
4. 2023-10-25 50K+ → 60K+ up after 293 days in tier
5. 2023-01-05 40K+ → 50K+ up after 5 days in tier
6. 2022-12-31 50K+ → 40K+ down after 4 days in tier
7. 2022-12-27 40K+ → 50K+ up after 1 days in tier
8. 2022-12-26 50K+ → 40K+ down after 5 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Booking for Appointments and Events Calendar – Amelia into a readme, a review or a deck. It updates itself.

Booking for Appointments and Events Calendar – Amelia: 90K+ active installs, 4.6★ (793 reviews). Plugin Pulse (WP Mayor), as of 2026-11-01. https://plugins.wpmayor.com/plugin/ameliabooking