Vikwp vulnerabilities

Products

• Vikbooking Hotel Booking Engine \& Pms 7
• Hotel Booking Engine \& Pms 3
• Vikbooking Hotel Booking Engine \& Property Management System Plugin 2

Newest

• e4jvikwp vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 more VikBooking < 1.7.2 - Admin+ Stored XSS CVE-2024-13616 4.8 MediumMay 15, 2025
• e4jvikwp vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 more VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-11641 8.8 HighJanuary 26, 2025
• e4jvikwp vikbooking hotel booking engine & pms, vikbooking hotel booking engine, vikwp vikbooking hotel booking engine \& pms +2 more VikBooking < 1.6.8 - Broken Access Control CVE-2024-2749 5.9 MediumMay 10, 2024
• e4jvikwp vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 more VikBooking < 1.6.8 - Insecure Direct Object References CVE-2024-2441 8.1 HighMay 10, 2024
• e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 more WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-32501 4.3 MediumNovember 9, 2023
• e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 more WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-25707 6.3 MediumMay 23, 2023
• e4j s.r.l. vikbooking hotel booking engine & pms, vikwp vikbooking hotel booking engine \& pms +1 more WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS) CVE-2023-24396 5.9 MediumApril 6, 2023
• e4jvikwp vikbooking hotel booking engine & pms, vikwp vik booking +1 more VikBooking < 1.5.9 - Reflected Cross-Site Scripting CVE-2022-1528 6.1 MediumMay 30, 2022
• e4jvikwp vikbooking hotel booking engine & pms, vikwp hotel booking engine \& pms +1 more VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File Upload CVE-2022-1409 7.2 HighMay 16, 2022
• e4jvikwp vikbooking hotel booking engine & pms, vikwp hotel booking engine \& pms +1 more VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ Stored Cross-Site Scripting CVE-2022-1408 4.8 MediumMay 16, 2022
• e4jvikwp vikbooking hotel booking engine & pms, vikwp hotel booking engine \& pms +1 more VikBooking Hotel Booking Engine & PMS < 1.5.7 - Stored Cross-Site Scripting via CSRF CVE-2022-1407 6.5 MediumMay 16, 2022
• e4j s.r.l. vikbooking hotel booking engine & pms (wordpress plugin), vikwp vikbooking hotel booking engine \& property management system plugin +1 more WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Sensitive Data Exposure vulnerability CVE-2022-27863 5.3 MediumApril 19, 2022
• e4j s.r.l. vikbooking hotel booking engine & pms (wordpress plugin), vikwp vikbooking hotel booking engine \& property management system plugin +1 more WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Arbitrary File Upload leading to RCE CVE-2022-27862 9.8 CriticalApril 19, 2022
• e4jvikwp vikrentcar car rental management system, vikwp car rental management system +1 more Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24519 4.8 MediumAugust 16, 2021