Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: vcita Component: Crm And Lead Management By Vcita Clear all filters
TI-2024-12741 CVE-2024-13702 · GHSA-fw8w-x93f-2wfh

CRM and Lead Management by vcita <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'vCitaMeetingScheduler' and 'vCitaSchedulingCalendar' shortcodes in all versions up to, and includin…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00214 Published 2025-03-26 No fix listed CWE-79
TI-2024-12742 CVE-2024-13703 · GHSA-c9cf-2qq3-hq8v

CRM and Lead Management by vcita <= 2.7.5 - Missing Authorization to Authenticated (Susbcriber+) Widget Toggle

Priority LOW 20

The CRM and Lead Management by vcita plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vcita_ajax_toggle_ae() function in all versions up to, and including,…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00299 Published 2025-03-13 No fix listed CWE-862
TI-2023-02258 CVE-2023-2404 · GHSA-w96h-896h-cpjm

CRM and Lead Management by vcita <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 29

The CRM and Lead Management by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 2.6.2 due to insufficient input sanitization and output e…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00596 Published 2023-06-03 No fix listed CWE-79