Approved changes feed: RSS · Atom

cpe:2.3:a:vcita:online_booking_&_scheduling_calendar_for_wordpress_by_vcita:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorVcita (f9afa774-5364-5965-9af3-3af6f6fd065b)
ProductOnline Booking & Scheduling Calendar For Wordpress By Vcita (33760c68-bb9c-5b6d-a8b6-e7810a14103f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-67559 vulnerable 2026-06-08 07:41:19.997607 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.5.
Published: 2025-12-09T14:14:09.425Z
Updated: 2026-04-28T16:14:21.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67472 vulnerable 2026-06-08 07:41:19.855842 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.5.
Published: 2025-12-09T14:13:56.599Z
Updated: 2026-04-28T16:14:19.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54677 vulnerable 2026-06-08 07:33:13.056864 WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload Vulnerability
CRITICAL (9.1)
Unrestricted Upload of File with Dangerous Type vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Using Malicious Files.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.3.
Published: 2025-08-20T08:02:52.476Z
Updated: 2026-04-28T16:13:33.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54676 vulnerable 2026-06-08 07:33:13.055589 WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Stored XSS.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.3.
Published: 2025-08-14T10:34:42.416Z
Updated: 2026-04-28T16:13:34.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32238 vulnerable 2026-06-08 07:18:59.354290 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability
MEDIUM (4.3)
Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.5.
Published: 2025-04-04T15:59:22.174Z
Updated: 2026-05-12T00:02:23.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9872 vulnerable 2026-06-08 07:00:28.827682 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5859 vulnerable 2026-06-08 06:56:17.633305 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5791 vulnerable 2026-06-08 06:56:17.438003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54356 vulnerable 2026-06-08 06:54:16.404002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47638 vulnerable 2026-06-08 06:48:12.986812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37499 vulnerable 2026-06-08 06:39:47.722076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35761 vulnerable 2026-06-08 06:39:42.660238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2416 vulnerable 2026-06-08 06:02:42.263225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2415 vulnerable 2026-06-08 06:02:42.260116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2414 vulnerable 2026-06-08 06:02:42.259700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2299 vulnerable 2026-06-08 06:02:42.001590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2298 vulnerable 2026-06-08 06:02:41.999906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.