CVE-2025-32238

Published: Apr 4, 2025Modified: Apr 23, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: audit@patchstack.com (Secondary)

Description

Generation of Error Message Containing Sensitive Information vulnerability in vcita Online Booking & Scheduling Calendar for WordPress by vcita meeting-scheduler-by-vcita allows Retrieve Embedded Sensitive Data.This issue affects Online Booking & Scheduling Calendar for WordPress by vcita: from n/a through <= 4.5.5.

Affected (1)

Products: Vcita: Online Booking & Scheduling Calendar

1 product

Online Booking & Scheduling Calendar

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vcita Online Booking & Scheduling Calendar	Up to 4.5.2

Related CWEs

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (1)

https://patchstack.com/database/Wordpress/Plugin/meeting-scheduler-by-vcita/vulnerability/wordpress-online-booking-scheduling-calendar-for-wordpress-by-vcita-plugin-4-5-2-sensitive-data-exposure-vulnerability?_s_id=cve

Source: audit@patchstack.com

Third Party Advisory

Timeline

No history available yet.