Online Booking & Scheduling Calendar for WordPress by vcita

Explore Online Booking & Scheduling Calendar for WordPress by vcita vulnerabilities across all versions. Currently tracking 19 known vulnerabilities, including severity, impact, and patch status.

01234567891016.02.2012Today02.06.20235.4Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery to Account Logout CVSS 5.4 · 02.06.20237.2Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 02.06.20235.4Online Booking & Scheduling Calendar for WordPress by vcita <= 4.2.10 - Missing Authorization to Account Logout CVSS 5.4 · 02.06.20235.3Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Missing Authorization on REST-API CVSS 5.3 · 02.06.20235.4Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Missing Authorization to Settings Update and Arbitrary File Upload CVSS 5.4 · 02.06.202310.08.20236.4Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 10.08.202320.06.20246.1Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting CVSS 6.1 · 20.06.202421.06.20247.2Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 21.06.202427.06.20246.1Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Reflected Cross-Site Scripting CVSS 6.1 · 27.06.202404.07.20248.8Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Authenticated (Contributor+) Local File Inclusion CVSS 8.8 · 04.07.202417.07.20246.4vCita Online Booking & Scheduling Calendar <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 17.07.202430.09.20246.1Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Reflected Cross-Site Scripting CVSS 6.1 · 30.09.202405.12.20245.4Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting CVSS 5.4 · 05.12.202411.12.20244.3Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery CVSS 4.3 · 11.12.202404.04.20254.3Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.2 - Authenticated (Subscriber+) Sensitive Information Exposure CVSS 4.3 · 04.04.202530.07.20256.4Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 30.07.202514.08.20258.8Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Author+) Arbitrary File Upload CVSS 8.8 · 14.08.202512.11.20254.3Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.5 - Cross-Site Request Forgery CVSS 4.3 · 12.11.20254.3Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.5 - Missing Authorization CVSS 4.3 · 12.11.2025

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage100%
Open

0

Fixed

19

Get automatic notifications for all Online Booking & Scheduling Calendar for WordPress by vcita vulnerabilities before they are exploited.

Vulnerability Records

19 records
2025-11-12 00:00CVE-2025-67472
4.3
Medium
Kévin Mosbahi (Mika)Yes
2025-11-12 00:00CVE-2025-67559
4.3
Medium
Kévin Mosbahi (Mika)Yes
2025-08-14 00:00CVE-2025-54677
8.8
High
Que Thanh Tuan - Blue RockYes
2025-07-30 00:00CVE-2025-54676
6.4
Medium
Que Thanh Tuan - Blue RockYes
2025-04-04 00:00CVE-2025-32238
4.3
Medium
Joshua ChanYes
2024-12-11 00:00CVE-2024-54356
4.3
Medium
Marek MikitaYes
2024-12-05 00:00CVE-2024-9872
5.4
Medium
stealthcopterYes
2024-09-30 00:00CVE-2024-47638
6.1
Medium
Abdi PranataYes
2024-07-17 00:00CVE-2024-35761
6.4
Medium
Ngô Thiên An (ancorn_)Yes
2024-07-04 00:00CVE-2024-37499
8.8
High
João Pedro Soares de AlcântaraYes
Showing 1–10 of 19 reports
Plugin Profile
Latestv4.6.0

Online Booking &amp; Scheduling Calendar for WordPress by vcita

vcita

Author

vcita

3.9(117)
78/100
Last Updated
2025-11-19 (8mo ago)
Active Installs
1,000+
Downloads
442,609
Requires WP
4.6+
Requires PHP
0+
Tested up to
WP 6.7.5
Created
2012-02-16 (15y ago)

vcita is the #1 scheduling software for service based business. Trusted by over 100,000 users worldwide! vcita’s appointment booking and online scheduling plugin for WordPress offers a self-service scheduling software for online sessions, 1-on-1 appointments, group events and classes. Convert website visitors to paying customers with online bookings: Take online appointments requests Enable online booking and rescheduling Offer registration for online sessions, 1:1 appointments, classes and events Register for events, sign up for classes Pay for services and view their invoices / receipts Offer online services via Zoom Accept secure online payments Key booking features: Business calendar for you and your staff Unlimited bookings and service list All service types: online, 1:1 appointments, classes and events Customizable services and grouping into categories Customizable business hours & booking preferences Business calendar for you and your staff Personalized branding and online appearance Email & TXT notifications, reminders & follow ups Customizable booking form * Staff members roles and permissions management * Adjust to any time zone  Sync with Google calendar / iCal / Outlook * Available in 11 languages – EN, EN GB, FR, ES, IT, PT, RU, DE, PL, NL, HE * Advanced analytics and export options Who is vcita good for? vcita was designed for service professionals and appointment-based businesses. With vcita, businesses at any size can accept bookings & payments 24/7 and manage their clients, schedule, and team from one centralized dashboard. From beauty Salons to business consultants, therapists and personal trainers, vcita fits any business, anywhere. Why business owners love vcita? Mobile app: your own office station, perfect for work on-the-go Instant availability: clients can self-book and pay 24/7 Get paid anywhere: choose between PayPal, Square or Stripe  No surprises: TXT appointment reminders eliminate no-shows  Exceptional client service: safe and secure self-service portal One app, one power house of advanced features: Take bookings 24/7 Accept payments online, offline & on-the-go Send TXT & email appointment and payment reminders  Issue green invoices, receipts & price estimates Keep neat client list and history records Invite team members to collaborate  Add lead capturing widgets to your website – Multi contact form, newsletter subscribers, booking & payment widgets Offer clients a secure and professional self-service portal Send email marketing campaigns and coupons Available integrations: Gmail / iCal / Outlook Zoom Facebook Google My Business Reserve with Google  QuickBooks Square  Stripe Zapier PayPal We are here 24/7/365 contact us Join Facebook’s user community Visit vcita help center Enjoying vcita? Love us back: Rate vcita 5 stars Join the partners program Follow vcita Facebook Linkedin Instagram Youtube FREE 14 DAYS TRIAL. No credit card needed

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C