Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

vcita vulnerabilities

32 published CVEs name vcita among the affected products.

All 32 in the listAtom feed of new CVEs
Published CVEs
32
Last 12 months
4
Critical
1
Known exploited
0

Critical 1High 5Medium 26Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 202310
  2. 20247
  3. 202513
  4. 20262

Newest CVEs

  • CVE-2026-95513

    WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Broken Access Control vulnerability

    vcita · Online Booking & Scheduling Calendar for WordPress by vcita

    High7.5
  • CVE-2026-14433

    Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter

    vcita · Online Booking & Scheduling Calendar by vcita

    High7.2
  • CVE-2025-67559

    WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control vulnerability

    vcita · Online Booking & Scheduling Calendar for WordPress by vcita

    Medium5.4
  • CVE-2025-67472

    WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site Request Forgery (CSRF) vulnerability

    vcita · Online Booking & Scheduling Calendar for WordPress by vcita

    Medium4.3
  • CVE-2025-54677

    WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload Vulnerability

    vcita · Online Booking & Scheduling Calendar for WordPress by vcita

    Critical9.1
  • CVE-2025-54676

    WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability

    vcita · Online Booking & Scheduling Calendar for WordPress by vcita

    Medium6.5
  • CVE-2025-5240

    CRM and Lead Management by vcita <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter

    vcita · CRM and Lead Management by vcita

    Medium6.4
  • CVE-2025-32238

    WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability

    vcita · Online Booking & Scheduling Calendar for WordPress by vcita

    Medium4.3
  • CVE-2024-13702

    CRM and Lead Management by vcita <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    vcita · CRM and Lead Management by vcita

    Medium6.4
  • CVE-2024-13703

    CRM and Lead Management by vcita <= 2.7.5 - Missing Authorization to Authenticated (Susbcriber+) Widget Toggle

    vcita · CRM and Lead Management by vcita

    Medium4.3

Products with the most CVEs

  1. Online Booking & Scheduling Calendar for WordPress by vcita18
  2. CRM and Lead Management by vcita5
  3. Online Payments – Get Paid with PayPal, Square & Stripe4
  4. Contact Form and Calls To Action by vcita3
  5. Event Registration Calendar By vcita3
  6. Online Booking & Scheduling Calendar by vcita1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)17
  2. CWE-862 Missing authorization7
  3. CWE-352 Cross-site request forgery (CSRF)5
  4. CWE-209 Sensitive information in an error message1
  5. CWE-22 Path traversal1
  6. CWE-434 Unrestricted file upload1