{"id":"CVE-2025-32238","aliases":["EUVD-2025-9803","GHSA-x24v-9fv7-jcfh"],"status":"published","title":"WordPress Online Booking \u0026 Scheduling Calendar for WordPress by vcita plugin \u003c= 4.5.5 - Sensitive Data Exposure vulnerability","description":"Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking \u0026 Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking \u0026 Scheduling Calendar for WordPress by vcita: from n/a through \u003c= 4.5.5.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00526,"percentile":0.44929,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-209"],"published":"2025-04-04T15:59:22Z","modified":"2026-06-17T09:11:39Z","products":[{"vendor":"vcita","product":"online booking \u0026 scheduling calendar for wordpress by vcita"},{"vendor":"vcita","product":"online_booking_\\\u0026_scheduling_calendar"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/meeting-scheduler-by-vcita/vulnerability/wordpress-online-booking-scheduling-calendar-for-wordpress-by-vcita-plugin-4-5-2-sensitive-data-exposure-vulnerability?_s_id=cve","tags":["vdb-entry","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32238"},{"url":"https://patchstack.com/database/wordpress/plugin/meeting-scheduler-by-vcita/vulnerability/wordpress-online-booking-scheduling-calendar-for-wordpress-by-vcita-plugin-4-5-2-sensitive-data-exposure-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-x24v-9fv7-jcfh"}],"sources":{"cve":[{"id":"CVE-2025-32238","title":"WordPress Online Booking \u0026 Scheduling Calendar for WordPress by vcita plugin \u003c= 4.5.5 - Sensitive Data Exposure vulnerability","description":"Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking \u0026 Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking \u0026 Scheduling Calendar for WordPress by vcita: from n/a through \u003c= 4.5.5.","status":"published","published":"2025-04-04T15:59:22.174Z","modified":"2026-05-12T00:02:23.35Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:32:46.42892Z"}],"euvd":[{"id":"EUVD-2025-9803","description":"Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking \u0026 Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking \u0026 Scheduling Calendar for WordPress by vcita: from n/a through \u003c= 4.5.5.","status":"published","published":"2025-04-04T15:59:22Z","modified":"2026-05-12T00:02:23Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:04:40.276379Z"}],"ghsa":[{"id":"GHSA-x24v-9fv7-jcfh","title":"Generation of Error Message Containing Sensitive Information vulnerability in vcita Online...","description":"Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking \u0026 Scheduling Calendar for WordPress by vcita allows Retrieve Embedded Sensitive Data. This issue affects Online Booking \u0026 Scheduling Calendar for WordPress by vcita: from n/a through 4.5.2.","status":"published","published":"2025-04-04T18:31:03Z","modified":"2025-04-04T18:31:03Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T15:00:48.250813Z"}],"nvd":[{"id":"CVE-2025-32238","description":"Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking \u0026 Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking \u0026 Scheduling Calendar for WordPress by vcita: from n/a through \u003c= 4.5.5.","status":"published","published":"2025-04-04T16:15:33.233Z","modified":"2026-06-17T09:11:39.983Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:10:59.48027Z"}]}}