Skip to content
PluginCanary

Online Booking & Scheduling Calendar by

Online Booking & Scheduling Calendar by vcita
by vcita · 1,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 23 Sep 2026, 11 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for Online Booking & Scheduling Calendar by
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Online Booking & Scheduling Calendar by still maintained?
Yes. Last release 23 Sep 2026, 11 releases in the last 24 months. 23 Sep 2026 · wordpress.org
Who owns Online Booking & Scheduling Calendar by, and has it changed hands?
No change recorded. Main committer vCita since Feb 2012. 3 Nov 2026 · SVN log
Was Online Booking & Scheduling Calendar by removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Online Booking & Scheduling Calendar by safe?
21 known vulnerabilities, all fixed (latest in 4.6.3). Not on the exploited list. 23 Sep 2026 · Wordfence Intelligence
Is the latest Online Booking & Scheduling Calendar by update safe to install?
No ownership change before 4.6.6. No one-star spike after it. 23 Sep 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
vCita16 Feb 2012 to 23 Sep 2026, 503 commits

1 committer recorded. No ownership change since 2012.

Maintenance

Last release
42 days ago
Releases, 24 months
11
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Online Booking & Scheduling Calendar by
Q1 20241
Q2 20246
Q3 20240
Q4 20242
Q1 20251
Q2 20250
Q3 20251
Q4 20251
Q1 20260
Q2 20260
Q3 20266
Q4 20260

Last release 23 Sep 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 3.9.

Rating distribution
5 star77
4 star9
3 star1
2 star4
1 star26

Security record

9 vulnerabilities in 24 months (21 on record), all patched (latest fixed in 4.6.3).

Show 21 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
23 Sep 2026Online Booking & Scheduling Calendar by vcita <= 4.6.0 - Missing Authorization5.3<= 4.6.04.6.3Patched before disclosure
14 Aug 2026Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter7.2<= 4.6.04.6.125
12 Nov 2025Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.5 - Missing Authorization4.3<= 4.5.54.6.07
12 Nov 2025Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.5 - Cross-Site Request Forgery4.3<= 4.5.54.6.07
14 Aug 2025Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Author+) Arbitrary File Upload8.8<= 4.5.34.5.5Patched before disclosure
30 Jul 2025Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.5.34.5.5Patched before disclosure
4 Apr 2025Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.2 - Authenticated (Subscriber+) Sensitive Information Exposure4.3<= 4.5.24.6.0229
11 Dec 2024Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery4.3<= 4.54.5.2Patched before disclosure
5 Dec 2024Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting5.4<= 4.5.14.5.2Patched before disclosure
30 Sep 2024Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Reflected Cross-Site Scripting6.1<= 4.4.64.545
17 Jul 2024vCita Online Booking & Scheduling Calendar <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.4.04.4.1Patched before disclosure
4 Jul 2024Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Authenticated (Contributor+) Local File Inclusion8.8<= 4.4.24.4.3Patched before disclosure
27 Jun 2024Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Reflected Cross-Site Scripting6.1<= 4.4.24.4.3Patched before disclosure
21 Jun 2024Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting7.2<= 4.4.24.4.3Patched before disclosure
20 Jun 2024Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting6.1<= 4.4.24.4.3Patched before disclosure
10 Aug 2023Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.3.24.3.3n/a
2 Jun 2023Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.3.04.3.1n/a
2 Jun 2023Online Booking & Scheduling Calendar for WordPress by vcita <= 4.2.10 - Missing Authorization to Account Logout5.4<= 4.2.104.3.010
2 Jun 2023Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Missing Authorization on REST-API5.3<= 4.4.24.4.3384
2 Jun 2023Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Missing Authorization to Settings Update and Arbitrary File Upload5.4<= 4.4.64.5531
2 Jun 2023Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery to Account Logout5.4<= 4.54.5.2548

Changelog mentions of security fixes: 4.6.1 (security, XSS, escaping); 4.6.2 (security, nonce, escaping, sanitize).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Online Booking & Scheduling Calendar by
4 May 202660
11 May 202688
18 May 202688
25 May 2026119
1 Jun 202682
8 Jun 2026100
15 Jun 202684
22 Jun 202688
29 Jun 202697
6 Jul 202698
13 Jul 2026114
20 Jul 2026102
27 Jul 202679
3 Aug 202613
10 Aug 202622
17 Aug 202617
24 Aug 202615
31 Aug 202646
7 Sep 202612
14 Sep 202636
21 Sep 20262,596
28 Sep 2026302
5 Oct 2026451
12 Oct 2026453
19 Oct 2026429
26 Oct 2026368
2 Nov 2026122

Weekly downloads over the last 4 weeks are 52% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

SimplyBook.meScore 100 · 30,000+MotoPress Hotel Booking StylesScore 100 · 10,000+MotoPress Hotel Booking for ElementorScore 100 · 10,000+EMCScore 93 · 10,000+WP Simple Booking CalendarScore 93 · 10,000+

Facts

Version4.6.6
Authorvcita
Added16 Feb 2012
Last updated23 Sep 2026
Active installs1,000+
Requires WordPress4.7
Tested up to7.1.4
Requires PHPnot stated
CategoryBookings & Scheduling > Appointment Scheduling
Tagsevents, booking, calendar, meetings, scheduling

Other plugins by this author: Online Payments - Get Paid with PayPal, Square & Stripe, CRM and Lead Management by vcita

Questions

Is Online Booking & Scheduling Calendar by still maintained?

Yes. Last release 23 Sep 2026, 11 releases in the last 24 months.

Who owns Online Booking & Scheduling Calendar by, and has it changed hands?

No change recorded. Main committer vCita since Feb 2012.

Was Online Booking & Scheduling Calendar by removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Online Booking & Scheduling Calendar by safe?

21 known vulnerabilities, all fixed (latest in 4.6.3). Not on the exploited list.

Is the latest Online Booking & Scheduling Calendar by update safe to install?

No ownership change before 4.6.6. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue