Executive brief
Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions.
Junglewise Threat Intelligence
CVE-2026-95513: Unauthenticated Broken Access Control in Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 versions.
CVE-2026-95513 · Severity: high · CVSS 7.5 · Published 2026-09-23