Browse CVEs

MEDIUM 5.4 CVE-2025-67559 Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Exploiting… Online Booking \& Scheduling Calendar 4.6.0+ Fix from $1,6002025-12-09 HIGH 8.8 CVE-2025-67472 Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allow… Online Booking \& Scheduling Calendar 4.6.0+ Fix from $1,9502025-12-09 HIGH 7.2 CVE-2025-54677 Unrestricted Upload of File with Dangerous Type vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-… Online Booking \& Scheduling Calendar 4.5.5+ Fix from $1,9502025-08-20 MEDIUM 5.4 CVE-2025-54676 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vcita Online Booking & Scheduling Calendar for … Online Booking \& Scheduling Calendar 4.5.5+ Fix from $1,6002025-08-14 MEDIUM 5.4 CVE-2024-13702 The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vCitaMeetingScheduler' and '… Crm And Lead Management By Vcita 2.7.5+ Fix from $1,6002025-03-26 MEDIUM 5.4 CVE-2024-11895 The Online Payments – Get Paid with PayPal, Square & Stripe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortc… Online Payments Get Paid With Paypal\, Square \& Stripe 3.30.0+ Fix from $1,6002025-02-18 MEDIUM 5.4 CVE-2024-54356 Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allow… Online Booking \& Scheduling Calendar 4.5.2+ Fix from $1,6002024-12-16 MEDIUM 5.4 CVE-2024-9872 The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a miss… Online Booking \& Scheduling Calendar 4.5.2+ Fix from $1,6002024-12-06 MEDIUM 6.1 CVE-2024-47638 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vcita Online Booking & Scheduling Calendar for … Online Booking \& Scheduling Calendar 4.5+ Fix from $1,6002024-10-05 MEDIUM 6.1 CVE-2024-37262 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in vCita.Com Online Booking & Scheduling Ca… Online Booking \& Scheduling Calendar 4.4.3+ Fix from $1,6002024-07-22 MEDIUM 6.5 CVE-2024-37499 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vCita Online Booking & Scheduling Calendar for WordPr… Online Booking \& Scheduling Calendar 4.4.3+ Fix from $1,6002024-07-09 MEDIUM 6.1 CVE-2024-5791 The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wp_id' par… Online Booking \& Scheduling Calendar 4.4.3+ Fix from $1,6002024-06-22 MEDIUM 5.4 CVE-2024-35761 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in vCita Online Booking & Scheduling Calend… Online Booking \& Scheduling Calendar 4.4.1+ Fix from $1,6002024-06-21 MEDIUM 6.1 CVE-2024-5859 The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘d’ para… Online Booking \& Scheduling Calendar 4.2.3+ Fix from $1,6002024-06-21 MEDIUM 6.1 CVE-2023-39992 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in vCita.Com Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.3.2 v… Online Booking \& Scheduling Calendar 4.3.3+ Fix from $1,6002023-09-04 MEDIUM 6.5 CVE-2023-2405 The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.0. This i… Crm And Lead Management By Vcita after 2.6.2 Fix from $1,6002023-06-03 MEDIUM 6.5 CVE-2023-2407 The Event Registration Calendar By vcita plugin, versions up to and including 3.10.0, and Online Payments – Get Paid with PayPal, Square & Stripe plu… Event Registration Calendar By Vcita after 3.9.1 Fix from $1,6002023-06-03 MEDIUM 6.5 CVE-2023-2416 The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery due to a missing non… Online Booking \& Scheduling Calendar after 4.2.10 Fix from $1,6002023-06-03 MEDIUM 6.1 CVE-2023-2298 The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_i… Online Booking \& Scheduling Calendar after 4.2.10 Fix from $1,6002023-06-03 MEDIUM 6.1 CVE-2023-2301 The Contact Form Builder by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.10.3. This is … Contact Form Builder By Vcita after 4.9.1 Fix from $1,6002023-06-03 MEDIUM 6.1 CVE-2023-2303 The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.10… Contact Form And Calls To Action By Vcita after 2.6.4 Fix from $1,6002023-06-03 MEDIUM 5.4 CVE-2023-2300 The Contact Form Builder by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and … Contact Form Builder By Vcita after 4.9.1 Fix from $1,6002023-06-03 MEDIUM 5.4 CVE-2023-2302 The Contact Form and Calls To Action by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions… Contact Form And Calls To Action By Vcita after 2.6.4 Fix from $1,6002023-06-03 MEDIUM 5.4 CVE-2023-2404 The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, a… Crm And Lead Management By Vcita after 2.6.2 Fix from $1,6002023-06-03 MEDIUM 5.4 CVE-2023-2406 The Event Registration Calendar By vcita plugin, versions up to and including 3.9.1, and Online Payments – Get Paid with PayPal, Square & Stripe plug… Event Registration Calendar By Vcita after 3.9.1 Fix from $1,6002023-06-03 MEDIUM 5.4 CVE-2023-2415 The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a miss… Online Booking \& Scheduling Calendar after 4.2.10 Fix from $1,6002023-06-03 MEDIUM 5.3 CVE-2023-2299 The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to unauthorized medication of data via the /wp-jso… Online Booking \& Scheduling Calendar after 4.2.10 Fix from $1,6002023-06-03