E4jvikwp Vikrentcar vulnerabilities

• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter CVE-2026-116548 7.2 HighOctober 31, 2026
• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via 'poplink' Parameter CVE-2026-115840 7.2 HighOctober 31, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-116405 7.1 HighOctober 30, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability CVE-2026-28160 7.1 HighOctober 30, 2026
• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute CVE-2026-116750 6.5 MediumOctober 28, 2026
• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute CVE-2026-116749 6.4 MediumOctober 28, 2026
• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task CVE-2026-111120 8.8 HighOctober 28, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-112838 7.1 HighOctober 23, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-112835 7.1 HighOctober 23, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-112836 8.8 HighOctober 20, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-39790 7.1 HighOctober 6, 2026
• e4j s.r.l. vikrentcar WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-52699 7.5 HighJune 15, 2026
• e4jvikwp vikrentcar car rental management system VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter CVE-2025-13724 7.5 HighDecember 2, 2025
• e4jconnect vikrentcar, e4jvikwp vikrentcar car rental management system +1 more VikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload CVE-2025-5322 7.2 HighJuly 3, 2025
• e4jconnect vikrentcar, e4jvikwp vikrentcar car rental management system +1 more VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-11640 8.8 HighMarch 8, 2025
• e4j vikrentcar car rental management system, e4jconnect vikrentcar +1 more VikRentCar Car Rental Management System < 1.3.2 - Cross Site Request Forgery CVE-2024-1845 8.8 HighJuly 11, 2024
• e4j s.r.l. vikrentcar car rental management system, e4jconnect vikrentcar +1 more WordPress VikRentCar Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23998 5.9 MediumApril 6, 2023
• e4jvikwp vikrentcar car rental management system, vikwp car rental management system +1 more Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24519 4.8 MediumAugust 16, 2021
• e4j vikrentcar car rental management system Vik Rent Car < 1.1.7 - CSRF to Stored XSS CVE-2021-24388 5.4 MediumJuly 6, 2021