CVE Tools

vcita

Enterprise Softwarecommercial

13

Cumulative CVEs

1

Monthly snapshots

#49

Peak rank

Top products

online booking & scheduling calendar for wordpress by vcita5 online booking \& scheduling calendar5 contact form builder by vcita2

Latest CVEs

The 15 most recently published vulnerabilities affecting vcita.

CVE-2025-67559WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control vulnerability5.4Dec 9, 2025
CVE-2025-67472WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site Request Forgery (CSRF) vulnerability4.3Dec 9, 2025
CVE-2025-54677WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload Vulnerability9.1Aug 20, 2025
CVE-2025-54676WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability6.5Aug 14, 2025
CVE-2025-5240CRM and Lead Management by vcita <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter6.4Jul 22, 2025
CVE-2025-32238WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability4.3Apr 4, 2025
CVE-2024-13702CRM and Lead Management by vcita <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4Mar 26, 2025
CVE-2024-13703CRM and Lead Management by vcita <= 2.7.5 - Missing Authorization to Authenticated (Susbcriber+) Widget Toggle4.3Mar 13, 2025
CVE-2024-11895Online Payments – Get Paid with PayPal, Square & Stripe <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4Feb 18, 2025
CVE-2024-13717Contact Form and Calls To Action by vcita <= 2.7.1 - Missing Authorization to Authenticated (Subscriber+) Contact/Widget Toggle4.3Jan 31, 2025
CVE-2024-11886Contact Form and Calls To Action by vcita <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4Jan 31, 2025
CVE-2025-22661WordPress Online Payments plugin <= 3.20.0 - Cross Site Scripting (XSS) vulnerability6.5Jan 21, 2025
CVE-2024-11870Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4Jan 15, 2025
CVE-2024-54356WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5 - Cross Site Request Forgery (CSRF) vulnerability5.4Dec 16, 2024
CVE-2024-9872Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting5.4Dec 6, 2024