VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

Online Booking & Scheduling Calendar by vcita security & vulnerabilities

meeting-scheduler-by-vcita— active installsLast vulnerability Sep 23, 2026

No known unpatched vulnerabilities in the latest version

All 21 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin
21Known vulnerabilities
  • Critical0
  • High5
  • Medium16
  • Low0
Vulnerabilities per year
2023: 6 vulnerabilities6232024: 8 vulnerabilities8242025: 5 vulnerabilities5252026: 2 vulnerabilities226

All Online Booking & Scheduling Calendar by vcita vulnerabilities

Online Booking & Scheduling Calendar by vcita vulnerabilities
SeverityVulnerabilityCVEPublished
Medium5.3Missing Authorization
≤4.6.0Update to 4.6.3
CVE-2026-95513
High7.2Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter
≤4.6.0Update to 4.6.1
CVE-2026-14433
Medium4.3Missing Authorization
≤4.5.5Update to 4.6.0
CVE-2025-67559
Medium4.3Cross-Site Request Forgery
≤4.5.5Update to 4.6.0
CVE-2025-67472
High8.8Authenticated (Author+) Arbitrary File Upload
≤4.5.3Update to 4.5.5
CVE-2025-54677
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.5.3Update to 4.5.5
CVE-2025-54676
Medium4.3Authenticated (Subscriber+) Sensitive Information Exposure
≤4.5.2Update to 4.6.0
CVE-2025-32238
Medium4.3Cross-Site Request Forgery
≤4.5Update to 4.5.2
CVE-2024-54356
Medium5.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤4.5.1Update to 4.5.2
CVE-2024-9872
Medium6.1Reflected Cross-Site Scripting
≤4.4.6Update to 4.5
CVE-2024-47638
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.4.0Update to 4.4.1
CVE-2024-35761
High8.8Authenticated (Contributor+) Local File Inclusion
≤4.4.2Update to 4.4.3
CVE-2024-37499
Medium6.1Reflected Cross-Site Scripting
≤4.4.2Update to 4.4.3
CVE-2024-37262
High7.2Missing Authorization to Unauthenticated Stored Cross-Site Scripting
≤4.4.2Update to 4.4.3
CVE-2024-5791
Medium6.1Reflected Cross-Site Scripting
≤4.4.2Update to 4.4.3
CVE-2024-5859
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤4.3.2Update to 4.3.3
CVE-2023-39992
Medium5.4Cross-Site Request Forgery to Account Logout
≤4.5Update to 4.5.2
CVE-2023-2416
Medium5.4Missing Authorization to Account Logout
≤4.2.10Update to 4.3.0
CVE-2023-2415
High7.2Unauthenticated Stored Cross-Site Scripting
≤4.3.0Update to 4.3.1
CVE-2023-2298
Medium5.3Missing Authorization on REST-API
≤4.4.2Update to 4.4.3
CVE-2023-2299
Medium5.4Missing Authorization to Settings Update and Arbitrary File Upload
≤4.4.6Update to 4.5
CVE-2023-2414

Online Booking & Scheduling Calendar by vcita: common questions

Does Online Booking & Scheduling Calendar by vcita have known vulnerabilities?

Yes. VulnCrest Radar lists 21 known vulnerabilities in Online Booking & Scheduling Calendar by vcita: 5 high, 16 medium. None are known to affect version null.

How do I check which version of Online Booking & Scheduling Calendar by vcita I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Online Booking & Scheduling Calendar by vcita vulnerability?

CVE-2026-95513, published Sep 23, 2026: Online Booking & Scheduling Calendar by vcita <= 4.6.0 - Missing Authorization. Severity: Medium (CVSS 5.3).

Is any Online Booking & Scheduling Calendar by vcita vulnerability listed in CISA KEV?

No. None of the known Online Booking & Scheduling Calendar by vcita vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?