CVE-2026-95513

The Online Booking & Scheduling Calendar for WordPress by vcita versions up to 4.6.0 is vulnerable to unauthenticated broken access control, allowing unauthorized users to access sensitive functionalities. This could lead to unauthorized data exposure or manipulation, posing a significant risk to site integrity and user privacy. WordPress site administrators using affected versions should prioritize applying patches or updates to mitigate this high-severity vulnerability.