Input validation vulnerability in Online Booking & Scheduling Calendar for WordPress by vcita 4.5.3

The booking and scheduling calendar for WordPress, specifically the vcita plugin, has a security flaw that allows unauthorized users to upload any type of file onto the website’s server. This could potentially lead to remote code execution, giving the attacker control over the website.

Detected in:

Online Booking & Scheduling Calendar for WordPress by vcita open vulnerable versions: >= * <= 4.5.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.