Skip to content
OpenAdvisories

Vendor

vcita

32 known vulnerabilities.

Products

Online Booking & Scheduling Calendar for WordPress by vcita 18 CRM and Lead Management by vcita 5 Online Payments – Get Paid with PayPal, Square & Stripe 4 Contact Form and Calls To Action by vcita 3 Event Registration Calendar By vcita 3 Online Booking & Scheduling Calendar by vcita 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2026-95513

    WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions.

    vcita Online Booking & Scheduling Calendar for WordPress by vcita Web / CMS
  • High 7.2
    CVE-2026-14433

    Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter

    The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_id' parameter in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output esc…

    vcita Online Booking & Scheduling Calendar by vcita Web / CMS
  • High 7.1
    CVE-2024-47638

    WordPress Online Booking & Scheduling Calendar for WordPress plugin <= 4.4.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Reflected XSS.This issue affects Online Booking & Schedul…

    vcita Online Booking & Scheduling Calendar for WordPress by vcita Web / CMS
  • High 7.2
    CVE-2024-5791

    Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting

    The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wp_id' parameter in all versions up to, and including, 4.4.2 due to missing authorization checks on processAction functi…

    vcita Online Booking & Scheduling Calendar for WordPress by vcita Web / CMS
  • High 7.2
    CVE-2023-2298

    Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site Scripting

    The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_id' parameter in versions up to, and including, 4.3.0 due to insufficient input sanitization and output escapin…

    vcita Online Booking & Scheduling Calendar for WordPress by vcita Web / CMS