High · 7.5 CVE-2026-95513 EUVD-2026-85488GHSA-mjgj-xrvj-x5wp

WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Broken Access Control vulnerability

Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack

Description

Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions.

Vendor	Product	Affected	Fixed
vcita	Online Booking & Scheduling Calendar for WordPress by vcita	≤ 4.6.0	—