{"id":"CVE-2024-54356","aliases":["EUVD-2024-52479","GHSA-c3hf-hhg3-xg3m"],"status":"published","title":"WordPress Online Booking \u0026 Scheduling Calendar for WordPress by vcita plugin \u003c= 4.5 - Cross Site Request Forgery (CSRF) vulnerability","description":"Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking \u0026 Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.This issue affects Online Booking \u0026 Scheduling Calendar for WordPress by vcita: from n/a through \u003c= 4.5.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00232,"percentile":0.14231,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2024-12-16T14:14:12Z","modified":"2026-06-17T08:10:11Z","products":[{"vendor":"vcita","product":"online booking \u0026 scheduling calendar for wordpress by vcita"},{"vendor":"vcita","product":"online_booking_\\\u0026_scheduling_calendar"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/meeting-scheduler-by-vcita/vulnerability/wordpress-online-booking-scheduling-calendar-for-wordpress-by-vcita-plugin-4-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve","tags":["vdb-entry","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54356"},{"url":"https://patchstack.com/database/wordpress/plugin/meeting-scheduler-by-vcita/vulnerability/wordpress-online-booking-scheduling-calendar-for-wordpress-by-vcita-plugin-4-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-c3hf-hhg3-xg3m"}],"sources":{"cve":[{"id":"CVE-2024-54356","title":"WordPress Online Booking \u0026 Scheduling Calendar for WordPress by vcita plugin \u003c= 4.5 - Cross Site Request Forgery (CSRF) vulnerability","description":"Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking \u0026 Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.This issue affects Online Booking \u0026 Scheduling Calendar for WordPress by vcita: from n/a through \u003c= 4.5.","status":"published","published":"2024-12-16T14:14:12.526Z","modified":"2026-04-28T16:10:50.822Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:33:59.177173Z"}],"euvd":[{"id":"EUVD-2024-52479","description":"Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking \u0026 Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.This issue affects Online Booking \u0026 Scheduling Calendar for WordPress by vcita: from n/a through \u003c= 4.5.","status":"published","published":"2024-12-16T14:14:12Z","modified":"2026-04-28T16:10:50Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T19:05:55.359032Z"}],"ghsa":[{"id":"GHSA-c3hf-hhg3-xg3m","title":"Cross-Site Request Forgery (CSRF) vulnerability in vCita.com Online Booking \u0026 Scheduling Calendar...","description":"Cross-Site Request Forgery (CSRF) vulnerability in vCita.com Online Booking \u0026 Scheduling Calendar for WordPress by vcita allows Cross Site Request Forgery.This issue affects Online Booking \u0026 Scheduling Calendar for WordPress by vcita: from n/a through 4.5.","status":"published","published":"2024-12-16T15:31:34Z","modified":"2024-12-16T15:31:44Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:59:11.996128Z"}],"nvd":[{"id":"CVE-2024-54356","description":"Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking \u0026 Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.This issue affects Online Booking \u0026 Scheduling Calendar for WordPress by vcita: from n/a through \u003c= 4.5.","status":"published","published":"2024-12-16T15:15:08.327Z","modified":"2026-06-17T08:10:11.53Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:10:40.137849Z"}]}}