E4jvikwp vulnerabilities

Products

• Vikbooking Hotel Booking Engine & Pms 28
• Vikrentcar Car Rental Management System 12
• Vikrentcar 7
• Vikappointments Services Booking Calendar 4
• Vikrestaurants 4
• Vikrentitems Flexible Rental Management System 3

Newest

• e4jvikwp vikbooking hotel booking engine & pms VikBooking Hotel Booking Engine & PMS <= 1.8.17 - Unauthenticated Stored Cross-Site Scripting via 'guests[][][documents]' Parameter CVE-2026-93429 7.2 HighNovember 7, 2026
• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter CVE-2026-116548 7.2 HighOctober 31, 2026
• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via 'poplink' Parameter CVE-2026-115840 7.2 HighOctober 31, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-116405 7.1 HighOctober 30, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability CVE-2026-28160 7.1 HighOctober 30, 2026
• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute CVE-2026-116750 6.5 MediumOctober 28, 2026
• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute CVE-2026-116749 6.4 MediumOctober 28, 2026
• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task CVE-2026-111120 8.8 HighOctober 28, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-112838 7.1 HighOctober 23, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-112835 7.1 HighOctober 23, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-112836 8.8 HighOctober 20, 2026
• e4jvikwp vikbooking hotel booking engine & pms VikBooking Hotel Booking Engine & PMS <= 1.8.15 - Unauthenticated Stored Cross-Site Scripting via 'attachments[name]' Parameter CVE-2026-95684 7.2 HighOctober 10, 2026
• e4jvikwp vikbooking hotel booking engine & pms WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability CVE-2026-95591 7.1 HighOctober 9, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-39790 7.1 HighOctober 6, 2026
• e4j s.r.l. vikappointments services booking calendar VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter CVE-2026-87115 9.1 CriticalOctober 3, 2026
• e4jvikwp vikrentitems flexible rental management system VikRentItems Flexible Rental Management System < 1.2.4 - Unauthenticated SQLi CVE-2026-88926 8.6 HighSeptember 19, 2026
• e4jvikwp vikbooking hotel booking engine & pms VikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat Attachment CVE-2026-85127 8.8 HighSeptember 18, 2026
• e4j s.r.l. vikappointments services booking calendar WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability CVE-2026-84768 9.3 CriticalSeptember 3, 2026
• e4j s.r.l. vikappointments services booking calendar VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection CVE-2026-15918 7.5 HighAugust 5, 2026
• e4jvikwp vikrentitems flexible rental management system VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting CVE-2026-16143 7.2 HighAugust 5, 2026
• e4jvikwp vikbooking hotel booking engine & pms VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter CVE-2026-15401 7.2 HighJuly 24, 2026
• e4jvikwp vikbooking hotel booking engine & pms VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parameter CVE-2026-15346 6.1 MediumJuly 24, 2026
• e4jvikwp vikbooking hotel booking engine & pms VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Field CVE-2026-6820 7.2 HighJuly 8, 2026
• e4jvikwp vikbooking hotel booking engine & pms VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' Parameter CVE-2026-6818 7.2 HighJuly 8, 2026
• e4jvikwp vikbooking hotel booking engine & pms WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerability CVE-2026-57723 7.4 HighJuly 1, 2026
• e4jvikwp vikbooking hotel booking engine & pms VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' Parameter CVE-2026-12754 6.1 MediumJuly 1, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-52699 7.5 HighJune 15, 2026
• e4jvikwp vikbooking hotel booking engine & pms WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-42683 7.1 HighJune 1, 2026
• e4jvikwp vikbooking hotel booking engine & pms WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-42762 7.1 HighMay 27, 2026
• e4jvikwp vikbooking hotel booking engine & pms WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerability CVE-2026-42737 8.6 HighMay 27, 2026
• e4jvikwp vikrestaurants WordPress VikRestaurants plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-25025 7.1 HighMarch 25, 2026
• e4jvikwp vikbooking hotel booking engine & pms WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerability CVE-2025-49918 5.9 MediumDecember 18, 2025
• e4jvikwp vikrentitems flexible rental management system VikRentItems Flexible Rental Management System <= 1.2.0 - Reflected Cross-Site Scripting via 'delto' Parameter CVE-2025-14049 6.1 MediumDecember 12, 2025
• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter CVE-2025-13724 7.5 HighDecember 2, 2025
• e4jvikwp vikbooking hotel booking engine & pms WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerability CVE-2025-5803 5.3 MediumNovember 6, 2025
• e4jvikwp vikrestaurants WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-57962 5.9 MediumSeptember 22, 2025
• e4jvikwp vikrestaurants WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability CVE-2025-57968 7.1 HighSeptember 22, 2025
• e4jconnect vikrentcar, e4jvikwp vikrentcar car rental management system +1 more VikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload CVE-2025-5322 7.2 HighJuly 3, 2025
• e4jvikwp vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 more VikBooking < 1.7.2 - Admin+ Stored XSS CVE-2024-13616 4.8 MediumMay 15, 2025
• e4jconnect vikrestaurants table reservations and take-away, e4jvikwp vikrestaurants +1 more WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.3.3 - CSRF to Stored XSS vulnerability CVE-2025-46251 7.1 HighApril 22, 2025
• e4jvikwp vikbooking hotel booking engine & pms WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.7.2 - CSRF to Settings Change vulnerability CVE-2025-22670 6.5 MediumMarch 27, 2025
• e4jconnect vikrentcar, e4jvikwp vikrentcar car rental management system +1 more VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-11640 8.8 HighMarch 8, 2025
• e4jvikwp vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 more VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-11641 8.8 HighJanuary 26, 2025
• e4j s.r.l. vikappointments services booking calendar WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability CVE-2025-22719 7.1 HighJanuary 21, 2025
• e4j vikrentcar car rental management system, e4jconnect vikrentcar +1 more VikRentCar Car Rental Management System < 1.3.2 - Cross Site Request Forgery CVE-2024-1845 8.8 HighJuly 11, 2024
• e4jvikwp vikbooking hotel booking engine & pms, vikbooking hotel booking engine, vikwp vikbooking hotel booking engine \& pms +2 more VikBooking < 1.6.8 - Broken Access Control CVE-2024-2749 5.9 MediumMay 10, 2024
• e4jvikwp vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 more VikBooking < 1.6.8 - Insecure Direct Object References CVE-2024-2441 8.1 HighMay 10, 2024
• e4jvikwp vikbooking hotel booking engine & pms, vikbooking hotel booking engine, vikbooking hotel booking engine & pms hotel booking engine & pms +2 more WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-32563 7.1 HighApril 18, 2024
• e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 more WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-32501 4.3 MediumNovember 9, 2023
• e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 more WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25707 6.3 MediumMay 23, 2023
• Show olderLoading…