CVE-2026-95513: Vcita Online Booking & Scheduling Calendar For WordPress By Vcita

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions.

Affected products

• Vcita Online Booking & Scheduling Calendar For WordPress By Vcita: up to and including 4.6.0

Published 2026-09-23. Last modified 2026-09-23.