SecAlerts
v

vcita

Security Risk Profile

44
/100
medium

Security Risk Score

Comprehensive risk assessment based on 37 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from June 3, 2023 to present

37
Total CVEs
9
Critical+High
0
Exploited
5
Unpatched

Threat Assessment

Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
44/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical
1
High
8
Medium
28
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
6

Age Distribution

Common Weaknesses (CWE)

1
XSS
21
2
CSRF
7
3
Malicious File Upload
1
4
Path Traversal
1

Most Affected Products

1. vcita Online Booking \& Scheduling Calendar Wordpress20
2. vcita Online Booking & Scheduling Calendar for WordPress9
3. vcita Crm And Lead Management By Vcita Wordpress4
4. vcita CRM and Lead Management3
5. vcita Online Payments - Get Paid With Paypal\, Square \& Stripe Wordpress3

Recent Vulnerabilities

See more →
CVE-2026-95513
CVSS 7.5high

WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Broken Access Control vulnerability

Sep 23, 2026🔧 No Patch
CVE-2026-14433
CVSS 7.2high

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter

Aug 15, 2026🔧 No Patch
CVE-2025-67559
CVSS 5.4medium

WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control vulnerability

Dec 9, 2025🔧 No Patch
CVE-2025-67472
CVSS 8.8high

WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Cross Site Request Forgery (CSRF) vulnerability

Dec 9, 2025🔧 No Patch
CVE-2025-54677
CVSS 9.1critical

WordPress Online Booking & Scheduling Calendar for WordPress by vcita Plugin <= 4.5.3 - Arbitrary File Upload Vulnerability

Aug 20, 2025
CVE-2025-54676
CVSS 6.5medium

WordPress Online Booking & Scheduling Calendar for by vcita Plugin plugin <= 4.5.3 - Cross Site Scripting (XSS) Vulnerability

Aug 14, 2025
CVE-2025-5240
CVSS 6.4medium

CRM and Lead Management by vcita <= 2.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via type Parameter

Jul 22, 2025🔧 No Patch
CVE-2025-32199
CVSS 6.5EPSS 0%medium

WordPress Contact Form Builder by vcita plugin <= 4.10.2 - Cross Site Scripting (XSS) vulnerability

Apr 10, 2025🔧 No Patch
CVE-2025-32238
CVSS 4.3EPSS 0%medium

WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Sensitive Data Exposure vulnerability

Apr 4, 2025🔧 No Patch
CVE-2024-13702
CVSS 6.4medium

CRM and Lead Management by vcita <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Mar 26, 2025

Monitor vcita in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.