Online Booking & Scheduling Calendar by vcita

73 Quality Score

Active Installs

14/30

With only 1,000 active installs it sits well behind every listed alternative, even though the raw score is boosted by relative category comparisons.

Update Freshness

25/25

The last update landed on 2025-11-19, which is recent, and it is tested against WordPress 6.7.5, so maintenance signals are the strongest part of the profile.

User Rating

12/15

A 78 out of 100 from 117 ratings is a decent but not standout user sentiment score, sitting clearly below Simply Schedule Appointments and Bookly in the same category.

Support Health

8/15

Zero support threads opened and zero resolved is a red flag; it may indicate low adoption rather than healthy self-service, but it leaves no public track record to lean on.

WP Compatibility

15/15

Requiring only WordPress 4.6 gives broad compatibility, yet no PHP version is declared, which is sloppy by current WordPress.org standards and slightly hurts the score.

Scores higher than 29% of indexed plugins

About

Let clients schedule meetings with you online! No more back & forth emails

Active Installs 1k+

Rating ★★★½ 3.9/5

Last Updated 2026-09-23 12:10pm GMT

Requires WordPress 4.7+

Tested Up To 7.1.2

Security History

20 known vulnerabilities, all patched

5 High 15 Medium

Most recent: August 14, 2026

View details ▸

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter High

August 14, 2026 Patched in [] CVE-2026-14433

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.5 - Cross-Site Request Forgery Medium

November 12, 2025 Patched in ["4.6.0"] CVE-2025-67472

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.5 - Missing Authorization Medium

November 12, 2025 Patched in ["4.6.0"] CVE-2025-67559

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Author+) Arbitrary File Upload High

August 14, 2025 Patched in ["4.5.5"] CVE-2025-54677

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

July 30, 2025 Patched in ["4.5.5"] CVE-2025-54676

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.2 - Authenticated (Subscriber+) Sensitive Information Exposure Medium

April 4, 2025 Patched in ["4.6.0"] CVE-2025-32238

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery Medium

December 11, 2024 Patched in ["4.5.2"] CVE-2024-54356

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting Medium

December 5, 2024 Patched in ["4.5.2"] CVE-2024-9872

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Reflected Cross-Site Scripting Medium

September 30, 2024 Patched in ["4.5"] CVE-2024-47638

vCita Online Booking & Scheduling Calendar <= 4.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

July 17, 2024 Patched in ["4.4.1"] CVE-2024-35761

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Authenticated (Contributor+) Local File Inclusion High

July 4, 2024 Patched in ["4.4.3"] CVE-2024-37499

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Reflected Cross-Site Scripting Medium

June 27, 2024 Patched in ["4.4.3"] CVE-2024-37262

Appointment Booking and Online Scheduling <= 4.4.2 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting High

June 21, 2024 Patched in ["4.4.3"] CVE-2024-5791

Appointment Booking and Online Scheduling <= 4.4.2 - Reflected Cross-Site Scripting Medium

June 20, 2024 Patched in ["4.4.3"] CVE-2024-5859

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 10, 2023 Patched in ["4.3.3"] CVE-2023-39992

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.6 - Missing Authorization to Settings Update and Arbitrary File Upload Medium

June 2, 2023 Patched in ["4.5"] CVE-2023-2414

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Missing Authorization on REST-API Medium

June 2, 2023 Patched in ["4.4.3"] CVE-2023-2299

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.2.10 - Missing Authorization to Account Logout Medium

June 2, 2023 Patched in ["4.3.0"] CVE-2023-2415

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site Scripting High

June 2, 2023 Patched in ["4.3.1"] CVE-2023-2298

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery to Account Logout Medium

June 2, 2023 Patched in ["4.5.2"] CVE-2023-2416

What It Does

This plugin adds an online booking calendar to your WordPress site so visitors can self-serve schedule meetings or appointments with you without exchanging emails. It targets service providers across roughly ten verticals, including salons, medical practices, fitness coaches, and tutors. The booking flow is handled through vcita's platform rather than fully within WordPress.

Who It's For

It is a reasonable fit for solo service providers and small businesses that want a quick way to let clients book a slot on the site without building a custom solution. It suits users who are comfortable with a SaaS-style booking backend behind their WordPress front end. If you need a simple scheduling widget and are not picky about deep WordPress integration, it will get the job done.

Who Should Skip It

Skip this plugin if you need a booking system that lives entirely inside WordPress, since vcita handles the core scheduling on its own servers. Also avoid it if you run a large or multi-staff operation, because the 1,000 active installs and limited WordPress.org support footprint suggest it has not been battle-tested at scale.

The Bottom Line

Online Booking & Scheduling Calendar by vcita scores 62.51 out of 100, putting it noticeably below every alternative listed. It is kept alive by active development and tested against current WordPress, but the tiny install base and zero public support history make it hard to recommend over Simply Schedule Appointments or Amelia. Treat it as a lightweight entry point into vcita's ecosystem rather than a long-term WordPress-native scheduling solution.

Related Plugins

The Events Calendar 90/100

Pick this if your main need is publishing and promoting events on a public calendar rather than taking one-on-one bookings.

Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin 84/100

Choose this for a higher-rated, WordPress-native scheduling experience with 60,000 installs and a stronger support track record.

Booking for Appointments and Events Calendar – Amelia 83/100

Go with Amelia if you want a feature-rich appointment system with payments, SMS reminders, and multi-staff support built in.

Online Scheduling and Appointment Booking System – Bookly 82/100

Pick Bookly when you need a mature, heavily extended booking platform with a large add-on marketplace.

WP Simple Booking Calendar 81/100

Choose this if you only need a basic availability calendar embed rather than a full appointment workflow.