Approved changes feed: RSS · Atom

cpe:2.3:a:vcita:online_booking_\&_scheduling_calendar:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorVcita (f9afa774-5364-5965-9af3-3af6f6fd065b)
ProductOnline Booking & Scheduling Calendar (b89f69e4-e203-5c1f-abe6-3fc5bad89c79)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-67559 vulnerable 2026-06-08 07:41:19.997648 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.5.
Published: 2025-12-09T14:14:09.425Z
Updated: 2026-04-28T16:14:21.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67472 vulnerable 2026-06-08 07:41:19.856638 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.5.
Published: 2025-12-09T14:13:56.599Z
Updated: 2026-04-28T16:14:19.591Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54677 vulnerable 2026-06-08 07:33:13.056988 WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload Vulnerability
CRITICAL (9.1)
Unrestricted Upload of File with Dangerous Type vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Using Malicious Files.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.3.
Published: 2025-08-20T08:02:52.476Z
Updated: 2026-04-28T16:13:33.894Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54676 vulnerable 2026-06-08 07:33:13.056410 WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Stored XSS.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.3.
Published: 2025-08-14T10:34:42.416Z
Updated: 2026-04-28T16:13:34.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-32238 vulnerable 2026-06-08 07:18:59.355302 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability
MEDIUM (4.3)
Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.5.
Published: 2025-04-04T15:59:22.174Z
Updated: 2026-05-12T00:02:23.350Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-9872 vulnerable 2026-06-08 07:00:28.828288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5859 vulnerable 2026-06-08 06:56:17.633465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5791 vulnerable 2026-06-08 06:56:17.439593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-54356 vulnerable 2026-06-08 06:54:16.404972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47638 vulnerable 2026-06-08 06:48:12.987458 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37499 vulnerable 2026-06-08 06:39:47.722120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-37262 vulnerable 2026-06-08 06:39:47.005356 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35761 vulnerable 2026-06-08 06:39:42.662940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39992 vulnerable 2026-06-08 06:09:38.256354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2416 vulnerable 2026-06-08 06:02:42.263297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2415 vulnerable 2026-06-08 06:02:42.262668 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2414 vulnerable 2026-06-08 06:02:42.259735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2299 vulnerable 2026-06-08 06:02:42.001656 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2298 vulnerable 2026-06-08 06:02:42.001124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.