Skip to contentE4jvikwp Vikbooking Hotel Booking Engine & Pms vulnerabilities
- e4jvikwp vikbooking hotel booking engine & pmsVikBooking Hotel Booking Engine & PMS <= 1.8.17 - Unauthenticated Stored Cross-Site Scripting via 'guests[][][documents]' ParameterCVE-2026-934297.2 High
- e4jvikwp vikbooking hotel booking engine & pmsVikBooking Hotel Booking Engine & PMS <= 1.8.15 - Unauthenticated Stored Cross-Site Scripting via 'attachments[name]' ParameterCVE-2026-956847.2 High
- e4jvikwp vikbooking hotel booking engine & pmsWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-955917.1 High
- e4jvikwp vikbooking hotel booking engine & pmsVikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat AttachmentCVE-2026-851278.8 High
- e4jvikwp vikbooking hotel booking engine & pmsVikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' ParameterCVE-2026-154017.2 High
- e4jvikwp vikbooking hotel booking engine & pmsVikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' ParameterCVE-2026-153466.1 Medium
- e4jvikwp vikbooking hotel booking engine & pmsVikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email FieldCVE-2026-68207.2 High
- e4jvikwp vikbooking hotel booking engine & pmsVikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' ParameterCVE-2026-68187.2 High
- e4jvikwp vikbooking hotel booking engine & pmsWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerabilityCVE-2026-577237.4 High
- e4jvikwp vikbooking hotel booking engine & pmsVikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' ParameterCVE-2026-127546.1 Medium
- e4jvikwp vikbooking hotel booking engine & pmsWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-426837.1 High
- e4jvikwp vikbooking hotel booking engine & pmsWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-427627.1 High
- e4jvikwp vikbooking hotel booking engine & pmsWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerabilityCVE-2026-427378.6 High
- e4jvikwp vikbooking hotel booking engine & pmsWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerabilityCVE-2025-499185.9 Medium
- e4jvikwp vikbooking hotel booking engine & pmsWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerabilityCVE-2025-58035.3 Medium
- e4jvikwp vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreVikBooking < 1.7.2 - Admin+ Stored XSSCVE-2024-136164.8 Medium
- e4jvikwp vikbooking hotel booking engine & pmsWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.7.2 - CSRF to Settings Change vulnerabilityCVE-2025-226706.5 Medium
- e4jvikwp vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreVikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-116418.8 High
- e4jvikwp vikbooking hotel booking engine & pms, vikbooking hotel booking engine, vikwp vikbooking hotel booking engine \& pms +2 moreVikBooking < 1.6.8 - Broken Access ControlCVE-2024-27495.9 Medium
- e4jvikwp vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreVikBooking < 1.6.8 - Insecure Direct Object ReferencesCVE-2024-24418.1 High
- e4jvikwp vikbooking hotel booking engine & pms, vikbooking hotel booking engine, vikbooking hotel booking engine & pms hotel booking engine & pms +2 moreWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-325637.1 High
- e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-325014.3 Medium
- e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-257076.3 Medium
- e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 moreWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)CVE-2023-243965.9 Medium
- e4jvikwp vikbooking hotel booking engine & pms, vikwp vik booking +1 moreVikBooking < 1.5.9 - Reflected Cross-Site ScriptingCVE-2022-15286.1 Medium
- e4jvikwp vikbooking hotel booking engine & pms, vikwp hotel booking engine \& pms +1 moreVikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File UploadCVE-2022-14097.2 High
- e4jvikwp vikbooking hotel booking engine & pms, vikwp hotel booking engine \& pms +1 moreVikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ Stored Cross-Site ScriptingCVE-2022-14084.8 Medium
- e4jvikwp vikbooking hotel booking engine & pms, vikwp hotel booking engine \& pms +1 moreVikBooking Hotel Booking Engine & PMS < 1.5.7 - Stored Cross-Site Scripting via CSRFCVE-2022-14076.5 Medium