Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Cross Site Request Forgery.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.5.
References
Configurations
Configuration 1 (hide)
|
History
12 Dec 2025, 12:31
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:vcita:online_booking_\&_scheduling_calendar:*:*:*:*:*:wordpress:*:* | |
| References | () https://vdp.patchstack.com/database/Wordpress/Plugin/meeting-scheduler-by-vcita/vulnerability/wordpress-online-booking-scheduling-calendar-for-wordpress-by-vcita-plugin-4-5-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve - Third Party Advisory | |
| First Time |
Vcita online Booking \& Scheduling Calendar
Vcita |
11 Dec 2025, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
09 Dec 2025, 16:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-09 16:18
Updated : 2025-12-12 12:31
NVD link : CVE-2025-67472
Mitre link : CVE-2025-67472
CVE.ORG link : CVE-2025-67472
JSON object : View
Products Affected
vcita
- online_booking_\&_scheduling_calendar
CWE
CWE-352
Cross-Site Request Forgery (CSRF)