CVEs we hold for Vcita
Records whose assigning authority named Vcita as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-14433Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via…vcita
CVE-2025-67559WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control…vcita
CVE-2025-67472WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site Request Forgery…vcita
CVE-2025-54677WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload…vcita
CVE-2025-54676WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS)…vcita
CVE-2025-5240CRM and Lead Management by vcita <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parametervcita
CVE-2025-32238WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure…vcita
CVE-2025-22661WordPress Online Payments plugin <= 3.20.0 - Cross Site Scripting (XSS) vulnerabilityvcita Online Payments – Get Paid with PayPal, Square &…
CVE-2024-9872Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site…vcita
CVE-2024-5859Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scriptingvcita
CVE-2024-5791Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site…vcita
CVE-2024-54356WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5 - Cross Site Request Forgery (CSRF)…vcita
CVE-2024-47638WordPress Online Booking & Scheduling Calendar for WordPress plugin <= 4.4.6 - Reflected Cross Site Scripting (XSS)…vcita
CVE-2024-37499WordPress Online Booking & Scheduling Calendar for WordPress plugin <= 4.4.2 - Local File Inclusion vulnerabilityvcita
CVE-2024-37262WordPress Online Booking & Scheduling Calendar plugin <= 4.4.2 - Reflected Cross Site Scripting (XSS) vulnerabilityvCita.com Online Booking & Scheduling Calendar for…
CVE-2024-35761WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.4.0 - Cross Site Scripting (XSS)…vcita
CVE-2024-13717Contact Form and Calls To Action by vcita <= 2.7.1 - Missing Authorization to Authenticated (Subscriber+)…vcita
CVE-2024-13703CRM and Lead Management by vcita <= 2.7.5 - Missing Authorization to Authenticated (Susbcriber+) Widget Togglevcita
CVE-2024-13702CRM and Lead Management by vcita <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingvcita
CVE-2024-11895Online Payments – Get Paid with PayPal, Square & Stripe <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site…vcita Online Payments – Get Paid with PayPal, Square &…
CVE-2024-11886Contact Form and Calls To Action by vcita <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingvcita
CVE-2024-11870Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingvcita
CVE-2023-39992WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.3.2 is vulnerable to Cross Site…vCita.com Online Booking & Scheduling Calendar for…
CVE-2023-2416Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery to Account Logoutvcita
CVE-2023-2415Online Booking & Scheduling Calendar for WordPress by vcita <= 4.2.10 - Missing Authorization to Account Logoutvcita
CVE-2023-2414Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Missing Authorization to Settings Update and…vcita
CVE-2023-2407Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.10.0 -…vcita Online Payments – Get Paid with PayPal, Square &…
CVE-2023-2406Event Registration Calendar By vcita <= 1.3.1 & Online Payments – Get Paid with PayPal, Square & Stripe <= 3.9.1 -…vcita Online Payments – Get Paid with PayPal, Square &…
CVE-2023-2405CRM and Lead Management by vcita <= 2.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scriptingvcita
CVE-2023-2404CRM and Lead Management by vcita <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingvcita
CVE-2023-2302Contact Form and Calls To Action by vcita <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingvcita
CVE-2023-2299Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Missing Authorization on REST-APIvcita
CVE-2023-2298Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site Scriptingvcita
33 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.