Vcita vulnerabilities

Products

• Online Booking & Scheduling Calendar For Wordpress By Vcita 20
• Online Booking \& Scheduling Calendar 19
• Crm And Lead Management By Vcita 5
• Crm And Lead Management By Vcita 4
• Online Payments – Get Paid With Paypal, Square & Stripe 4
• Contact Form And Calls To Action By Vcita 3
• Event Registration Calendar By Vcita 3
• Online Payments - Get Paid With Paypal\, Square \& Stripe 3
• Contact Form And Calls To Action By Vcita 2
• Contact Form Builder By Vcita 2
• Event Registration Calendar By Vcita 2

Newest

• vcita online booking & scheduling calendar for wordpress by vcita WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Broken Access Control vulnerability CVE-2026-95513 7.5 HighSeptember 23, 2026
• vcita online booking & scheduling calendar by vcita Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter CVE-2026-14433 7.2 HighAugust 15, 2026
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control vulnerability CVE-2025-67559 5.4 MediumDecember 9, 2025
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-67472 4.3 MediumDecember 9, 2025
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload Vulnerability CVE-2025-54677 Public exploit 9.1 CriticalAugust 20, 2025
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-54676 6.5 MediumAugust 14, 2025
• vcita crm and lead management by vcita CRM and Lead Management by vcita <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter CVE-2025-5240 6.4 MediumJuly 22, 2025
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability CVE-2025-32238 4.3 MediumApril 4, 2025
• vcita crm and lead management by vcita CRM and Lead Management by vcita <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13702 6.4 MediumMarch 26, 2025
• vcita crm and lead management by vcita CRM and Lead Management by vcita <= 2.7.5 - Missing Authorization to Authenticated (Susbcriber+) Widget Toggle CVE-2024-13703 4.3 MediumMarch 13, 2025
• vcita online payments – get paid with paypal, square & stripe, online payments - get paid with paypal\, square \& stripe +1 more Online Payments – Get Paid with PayPal, Square & Stripe <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11895 6.4 MediumFebruary 18, 2025
• vcita contact form and calls to action by vcita Contact Form and Calls To Action by vcita <= 2.7.1 - Missing Authorization to Authenticated (Subscriber+) Contact/Widget Toggle CVE-2024-13717 4.3 MediumJanuary 31, 2025
• vcita contact form and calls to action by vcita Contact Form and Calls To Action by vcita <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11886 6.4 MediumJanuary 31, 2025
• vcita online payments – get paid with paypal, square & stripe WordPress Online Payments plugin <= 3.20.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-22661 6.5 MediumJanuary 21, 2025
• vcita event registration calendar by vcita Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-11870 6.4 MediumJanuary 15, 2025
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-54356 5.4 MediumDecember 16, 2024
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-9872 5.4 MediumDecember 6, 2024
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more WordPress Online Booking & Scheduling Calendar for WordPress plugin <= 4.4.6 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-47638 7.1 HighOctober 5, 2024
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more WordPress Online Booking & Scheduling Calendar plugin <= 4.4.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-37262 7.1 HighJuly 22, 2024
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more WordPress Online Booking & Scheduling Calendar for WordPress plugin <= 4.4.2 - Local File Inclusion vulnerability CVE-2024-37499 6.5 MediumJuly 9, 2024
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting CVE-2024-5791 7.2 HighJune 22, 2024
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-35761 6.5 MediumJune 21, 2024
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting CVE-2024-5859 6.1 MediumJune 21, 2024
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.3.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-39992 7.1 HighSeptember 4, 2023
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Missing Authorization to Settings Update and Arbitrary File Upload CVE-2023-2414 5.4 MediumJune 9, 2023
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery to Account Logout CVE-2023-2416 5.4 MediumJune 3, 2023
• vcita crm and lead management by vcita CRM and Lead Management by vcita <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-2404 6.4 MediumJune 3, 2023
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more Online Booking & Scheduling Calendar for WordPress by vcita <= 4.2.10 - Missing Authorization to Account Logout CVE-2023-2415 5.4 MediumJune 3, 2023
• eyale-vc contact form builder by vcita Contact Form Builder by vcita <= 4.10.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2023-2301 6.1 MediumJune 3, 2023
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site Scripting CVE-2023-2298 7.2 HighJune 3, 2023
• vcita contact form and calls to action by vcita Contact Form and Calls To Action by vcita <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-2302 6.4 MediumJune 3, 2023
• vcita online booking & scheduling calendar for wordpress by vcita, online booking \& scheduling calendar +1 more Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Missing Authorization on REST-API CVE-2023-2299 5.3 MediumJune 3, 2023
• vcita event registration calendar by vcita, online payments – get paid with paypal, square & stripe, online payments - get paid with paypal\, square \& stripe +2 more Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.10.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2023-2407 6.1 MediumJune 3, 2023
• vcita contact form and calls to action by vcita, eyale-vc contact form builder by vcita +1 more Contact Form and Calls To Action by vcita <= 4.10.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2023-2303 6.1 MediumJune 3, 2023
• vcita event registration calendar by vcita, online payments – get paid with paypal, square & stripe, online payments - get paid with paypal\, square \& stripe +2 more Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-2406 6.4 MediumJune 3, 2023
• eyale-vc contact form builder by vcita Contact Form Builder by vcita <= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-2300 6.4 MediumJune 3, 2023
• vcita crm and lead management by vcita CRM and Lead Management by vcita <= 2.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2023-2405 6.1 MediumJune 3, 2023