CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

295 matches found

Patchstack•added 2026/08/17 10:10 a.m.•9 views

WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter vulnerability

Unauthenticated Stored Cross-Site Scripting via REST API 'businessid' Parameter vulnerability discovered by MatilJ in WordPress Plugin Online Booking & Scheduling Calendar for WordPress by vcita versions = 4.6.0...

7.2CVSS5.2AI score0.00236EPSS

SaveExploits0References1Affected Software1

NVD•added 2026/08/15 3:16 a.m.•13 views

CVE-2026-14433

The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'businessid' parameter in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping. This makes it possible for...

7.2CVSS0.00236EPSS

SaveExploits0References5

Vulnrichment•added 2026/08/15 2:26 a.m.•4 views

CVE-2026-14433 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter

7.2CVSS5.5AI score0.00236EPSS

SaveExploits0References5

Cvelist•added 2026/08/15 2:26 a.m.•32 views

CVE-2026-14433 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter

7.2CVSS0.00236EPSS

SaveExploits0References5

ATTACKERKB•added 2026/08/15 2:26 a.m.•9 views

CVE-2026-14433

5.5AI score0.00236EPSS

SaveExploits0References6

CVE•added 2026/08/15 2:26 a.m.•29 views

CVE-2026-14433

The CVE-2026-14433 entry describes a Stored Cross-Site Scripting (XSS) vulnerability in the Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress. The flaw affects the REST API via the business_id parameter and is present in all versions up to and including 4.6.0, due t...

7.2CVSS5.5AI score0.00236EPSS

SaveExploits0References5

Positive Technologies•added 2026/08/15 12:00 a.m.•10 views

PT-2026-72140

Name of the Vulnerable Software and Affected Versions Online Booking & Scheduling Calendar for WordPress by vcita versions prior to 4.6.1 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform Stored Cross-Site Scripting XSS, a technique where...

7.2CVSS5.7AI score0.00236EPSS

SaveExploits0References9

Patchstack•added 2025/12/31 12:00 a.m.•7 views

WordPress Contact Form and Calls To Action by vcita plugin <= 2.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Contact Form and Calls To Action by vcita versions = 2.7.1...

6.4CVSS5.3AI score0.00306EPSS

SaveExploits0References1Affected Software1

RedhatCVE•added 2025/12/10 2:23 p.m.•9 views

CVE-2025-67472

Cross-Site Request Forgery CSRF vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through = 4.5.5...

8.8CVSS6.8AI score0.00146EPSS

SaveExploits0References1

RedhatCVE•added 2025/12/10 2:23 p.m.•7 views

CVE-2025-67559

Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a...

5.4CVSS7AI score0.00243EPSS

SaveExploits0References1

EUVD•added 2025/12/09 6:30 p.m.•12 views

EUVD-2025-202087

5.4CVSS6.4AI score0.00243EPSS

SaveExploits0References2

EUVD•added 2025/12/09 6:30 p.m.•8 views

EUVD-2025-202132

6.3AI score0.00146EPSS

SaveExploits0References2

NVD•added 2025/12/09 4:18 p.m.•17 views

CVE-2025-67559

5.4CVSS0.00243EPSS

SaveExploits0References1

OSV•added 2025/12/09 4:18 p.m.•8 views

CVE-2025-67559

5.4CVSS5.8AI score0.00243EPSS

SaveExploits0References1

NVD•added 2025/12/09 4:18 p.m.•9 views

CVE-2025-67472

8.8CVSS0.00146EPSS

SaveExploits0References1

OSV•added 2025/12/09 4:18 p.m.•9 views

CVE-2025-67472

8.8CVSS5.8AI score0.00146EPSS

SaveExploits0References1

Cvelist•added 2025/12/09 2:14 p.m.•30 views

CVE-2025-67559 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control vulnerability

5.4CVSS0.00243EPSS

SaveExploits0References1

Vulnrichment•added 2025/12/09 2:14 p.m.•6 views

CVE-2025-67559 WordPress Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.5.5 - Broken Access Control vulnerability

5.4CVSS6.6AI score0.00243EPSS

SaveExploits0References1

CVE•added 2025/12/09 2:14 p.m.•27 views

CVE-2025-67559

CVE-2025-67559 affects the WordPress plugin “Online Booking & Scheduling Calendar for WordPress by vcita” up to version 4.5.5. The issue is a Missing Authorization / Broken Access Control vulnerability caused by incorrectly configured access control levels, allowing unauthorized actions within th...

5.4CVSS6.6AI score0.00243EPSS

SaveExploits0References1Affected Software1

CVE•added 2025/12/09 2:13 p.m.•18 views

CVE-2025-67472

CVE-2025-67472 relates to a CSRF vulnerability in the vcita Online Booking & Scheduling Calendar for WordPress by vcita plugin (WordPress) affecting versions up to and including 4.5.5. The issue enables Cross Site Request Forgery, potentially allowing an attacker to perform actions on behalf of a...

8.8CVSS6.5AI score0.00146EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by