vCita vulnerabilities
We track 3 vulnerabilities in vCita products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 15, 2026.
Latest vCita vulnerabilities
- 7.2 High severity
Online Booking & Scheduling Calendar by vcita: Improper Neutralization of Input During Web Page Generation
The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_id' parameter in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output esca
- 8.8 High severity
Online Booking & Scheduling Calendar for…: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: fr
- 7.2 High severity
Online Booking & Scheduling Calendar for…: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Using Malicious Files.This issue affects Online Booking & Scheduling Calendar for WordPress by