Online Booking & Scheduling Calendar for WordPress by vcita
vcita
Developer
4.6.6
Latest version
1,000
Installations
No date
Last updated
Vulnerability history
1 present
18 patched
13 Mitigation rules
- Broken Access Control vulnerability<= 4.6.023/09/2026
- Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter vulnerability<= 4.6.017/08/2026
- Cross Site Request Forgery (CSRF) vulnerability<= 4.5.512/11/2025
- Broken Access Control vulnerability<= 4.5.512/11/2025
- Arbitrary File Upload Vulnerability<= 4.5.314/08/2025
- Cross Site Scripting (XSS) Vulnerability<= 4.5.330/07/2025
- Sensitive Data Exposure vulnerability<= 4.5.504/04/2025
- Cross Site Request Forgery (CSRF) vulnerability<= 4.511/12/2024
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 4.5.106/12/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 4.4.630/09/2024
- Local File Inclusion vulnerability<= 4.4.204/07/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 4.4.227/06/2024
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 4.4.221/06/2024
- Cross Site Scripting (XSS) vulnerability<= 4.4.017/06/2024
- Reflected Cross Site Scripting (XSS) vulnerability<= 4.3.210/08/2023
- Unauth. Stored Cross-Site Scripting (XSS) vulnerability< 4.3.205/06/2023
- Missing Authorization to Account Logout vulnerability<= 4.2.1005/06/2023
- Missing Authorization on REST-API vulnerability<= 4.4.205/06/2023
- Missing Authorization to Arbitrary File Upload vulnerability<= 4.4.605/06/2023