CVE-2025-54677

CVE-2025-54677 concerns vcita’s Online Booking & Scheduling Calendar for WordPress (plugin: meeting-scheduler-by-vcita) up to version 4.5.3. The issue is an Unrestricted Upload of File with Dangerous Type , allowing attackers to upload malicious files. Public sources identify the affected plugin ...