CVE-2023-2299

概要

参考情報

• blog.jonh.eu/blog/security-vulnerabilities-in-wordpress-plugins-by-vcita · Third Party Advisory
• plugins.trac.wordpress.org/browser/meeting-scheduler-by-vcita/trunk/vcita-api-functions.php · Patch
• plugins.trac.wordpress.org/changeset/3104980/meeting-scheduler-by-vcita/trunk/vcita-api-functions.php
• wordfence.com/threat-intel/vulnerabilities/id/4855627a-de56-49ee-b0b0-01b9735d8557 · Third Party Advisory

online booking & scheduling calendar のその他の脆弱性

• CVE-2025-67559中 5.4Missing Authorization vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows E…
• CVE-2025-67472高 8.8Cross-Site Request Forgery (CSRF) vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vc…
• CVE-2025-54677高 7.2Unrestricted Upload of File with Dangerous Type vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-s…
• CVE-2025-54676中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vcita Online Booking & Scheduling Cale…
• CVE-2025-32238中 4.3Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vc…