CVE-2025-32238
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 4, 2025
Updated: Apr 7, 2025
CWE ID 209
Summary
CVE-2025-32238 is a vulnerability affecting the vcita Online Booking & Scheduling Calendar for WordPress plugin. The issue allows an attacker to retrieve sensitive data by generating an error message containing the information. This vulnerability exists in all versions of the plugin from the initial release through 4.5.2.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.