Access violation vulnerability in Online Booking & Scheduling Calendar for WordPress by vcita 4.2.10

The vcita plugin for WordPress, which is a tool for managing online bookings and scheduling, is vulnerable to data tampering by unauthorized users in versions up to and including 4.2.10. This vulnerability allows people with limited permissions, such as a website subscriber, to modify the plugin’s settings, upload media files, and inject malicious JavaScript into the site. To protect against this issue, users of the vcita plugin should make sure to update to the latest version.

Detected in:

Online Booking & Scheduling Calendar for WordPress by vcita open vulnerable versions: >= * <= 4.4.6

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.