vCita Online Booking & Scheduling Calendar for WordPress by vcita

• CVE-2026-95513 High 7.5 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Broken Access Control vulnerability 0.3%
• CVE-2025-67559 Medium 5.4 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control vulnerability 0.2%
• CVE-2025-67472 Medium 4.3 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
• CVE-2025-54677 Critical 9.1 WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload Vulnerability 0.4%
• CVE-2025-54676 Medium 6.5 WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-32238 Medium 4.3 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability 0.5%
• CVE-2024-54356 Medium 5.4 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2024-9872 Medium 5.4 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting 0.3%
• CVE-2024-47638 High 7.1 WordPress Online Booking & Scheduling Calendar for WordPress plugin <= 4.4.6 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-37499 Medium 6.5 WordPress Online Booking & Scheduling Calendar for WordPress plugin <= 4.4.2 - Local File Inclusion vulnerability 0.6%
• CVE-2024-5791 High 7.2 Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting 0.3%
• CVE-2024-35761 Medium 6.5 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.4.0 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2024-5859 Medium 6.1 Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting 0.3%
• CVE-2023-2414 Medium 5.4 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Missing Authorization to Settings Update and Arbitrary File Upload 0.5%
• CVE-2023-2416 Medium 5.4 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery to Account Logout 0.4%
• CVE-2023-2298 High 7.2 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site Scripting 0.6%
• CVE-2023-2415 Medium 5.4 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.2.10 - Missing Authorization to Account Logout 0.7%
• CVE-2023-2299 Medium 5.3 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Missing Authorization on REST-API 0.6%