Skip to contentE4j S.r.l. vulnerabilities
Newest
- e4j s.r.l. vikrentcarWordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1164057.1 High
- e4j s.r.l. vikrentcarWordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-281607.1 High
- e4j s.r.l. vikrentcarWordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1128387.1 High
- e4j s.r.l. vikrentcarWordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1128357.1 High
- e4j s.r.l. vikrentcarWordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2026-1128368.8 High
- e4j s.r.l. vikrentcarWordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-397907.1 High
- e4j s.r.l. vikappointments services booking calendarVikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' ParameterCVE-2026-871159.1 Critical
- e4j s.r.l. vikappointments services booking calendarWordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerabilityCVE-2026-847689.3 Critical
- e4j s.r.l. vikappointments services booking calendarVikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL InjectionCVE-2026-159187.5 High
- e4j s.r.l. vikrentcarWordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-526997.5 High
- e4j s.r.l. vikappointments services booking calendarWordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerabilityCVE-2025-227197.1 High
- e4j s.r.l. vikrentcarWordPress VikRentCar Car Rental Management System plugin <= 1.4.0 - SQL Injection vulnerabilityCVE-2024-396539.3 Critical
- e4j vikrentcar car rental management system, e4j s.r.l. vikrentcar +1 moreWordPress VikRentCar Car Rental Management System plugin <= 1.3.2 - Sensitive Data Exposure via Invoices vulnerabilityCVE-2024-327805.9 Medium
- e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-325014.3 Medium
- e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-257076.3 Medium
- e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)CVE-2023-243965.9 Medium
- e4j s.r.l. vikrentcar car rental management system, e4jconnect vikrentcar +1 moreWordPress VikRentCar Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)CVE-2023-239985.9 Medium
- e4j s.r.l. vikbooking hotel booking engine & pms (wordpress plugin), vikwp vikbooking hotel booking engine \& property management system plugin +1 moreWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Sensitive Data Exposure vulnerabilityCVE-2022-278635.3 Medium
- e4j s.r.l. vikbooking hotel booking engine & pms (wordpress plugin), vikwp vikbooking hotel booking engine \& property management system plugin +1 moreWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Arbitrary File Upload leading to RCECVE-2022-278629.8 Critical
- e4j vikrentcar car rental management systemVik Rent Car < 1.1.7 - CSRF to Stored XSSCVE-2021-243885.4 Medium