A vulnerability was found in vcita Online Booking & Scheduling Calendar Plugin up to 4.5.5 on WordPress and classified as critical. This affects an unknown function. The manipulation results in missing authorization.
This vulnerability was named CVE-2025-67559. The attack may be performed from remote. There is no available exploit.