The Amelia Pro WordPress plugin for booking appointments and events is vulnerable to a time-based SQL Injection via the 'tag[]' array keys parameter in versions up to and including 9.9.1. This vulnerability arises from insufficient escaping of user-supplied array keys, allowing unauthenticated attackers to inject additional SQL queries. Exploitation could lead to extraction of sensitive database information without authentication.