CVE-2025-67559
Published Dec 9, 2025Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Exploiting Incorrectly Configured Access…
Vendor archive
vcita CVEs
Beta · best-effort30 CVEs tagged to vendor vcita — 1 Critical, 5 High, 24 Medium, 0 Low, 0 Unrated.
CVE-2025-67472
Published Dec 9, 2025Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.T…
CVE-2025-54677
Published Aug 20, 2025Unrestricted Upload of File with Dangerous Type vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Using Maliciou…
CVE-2025-54676
Published Aug 14, 2025Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-sch…
CVE-2025-32238
Published Apr 4, 2025Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows R…
CVE-2024-13702
Published Mar 26, 2025The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vCitaMeetingScheduler' and 'vCitaSchedulingCalendar' short…
CVE-2024-13703
Published Mar 13, 2025The CRM and Lead Management by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcita_ajax_toggle_ae() functi…
CVE-2024-11895
Published Feb 18, 2025The Online Payments – Get Paid with PayPal, Square & Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, an…
CVE-2024-54356
Published Dec 16, 2024Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.T…
CVE-2024-9872
Published Dec 6, 2024The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vc…
CVE-2024-47638
Published Oct 5, 2024Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-sch…
CVE-2024-37262
Published Jul 22, 2024Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in vCita.Com Online Booking & Scheduling Calendar for WordPress by vcita…
CVE-2024-37499
Published Jul 9, 2024Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allows Path Trave…
CVE-2024-5791
Published Jun 22, 2024The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wp_id' parameter in all versions up to,…
CVE-2024-35761
Published Jun 21, 2024Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allo…
CVE-2024-5859
Published Jun 21, 2024The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘d’ parameter in all versions up to, a…
CVE-2023-39992
Published Sep 4, 2023Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in vCita.Com Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.3.2 versions.
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-2414
Published Jun 9, 2023The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vc…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-2416
Published Jun 3, 2023The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing nonce check on the vcita_logout_c…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-2415
Published Jun 3, 2023The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vc…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-2407
Published Jun 3, 2023The Event Registration Calendar By vcita plugin, versions up to and including 3.10.0, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnera…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-2406
Published Jun 3, 2023The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square & Stripe plugin, for WordPress are vulnerab…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-2405
Published Jun 3, 2023The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.0. This is due to missing nonce validat…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-2404
Published Jun 3, 2023The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 2.6.2 due to ins…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2023-2303
Published Jun 3, 2023The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.10.5. This is due to missing non…
- evidence mentions
- 1
- Buzz score
- 11.9
Showing 1-25 of 30 CVEsPage 1 of 2