Online Booking & Scheduling Calendar for WordPress by vcita, CVE-2025-54677
- CVE, Research URL
- Published on
- Aug 20, 2025
- Research Description
- Unrestricted Upload of File with Dangerous Type vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita allows Using Malicious Files. This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through 4.5.3.
- Affected versions
-
Min -, max 4.5.5.
- Status
-
vulnerable
| Previous vulnerability researches |
|---|
| Dropshix (CVE-2025-49898) , Aug 18, 2025 |
| Dropshix (8a675b0193a15c4043ca71e64499179a938c14b5) , Jun 06, 2024 |