Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-37499 EUVD-2024-36711GHSA-6rrh-qhpx-962q

WordPress Online Booking & Scheduling Calendar for WordPress plugin <= 4.4.2 - Local File Inclusion vulnerability

Published Jul 9, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vCita Online Booking & Scheduling Calendar for WordPress by vcita allows Path Traversal.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.4.2.

Affected products

VendorProductAffectedFixed
vCita Online Booking & Scheduling Calendar for WordPress by vcita ≤ 4.4.2 —

References