E4jvikwp vulnerabilities
41 CVEs and advisories name E4jvikwp as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-93429VikBooking Hotel Booking Engine & PMS <= 1.8.17 - Unauthenticated Stored Cross-Site Scripting via 'guests[][][documents]' Parameter
- CVE-2026-116548VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter
- CVE-2026-115840VikRentCar Car Rental Management System <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via 'poplink' Parameter
- CVE-2026-116405WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-28160WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-116750VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute
- CVE-2026-116749VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute
- CVE-2026-111120VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task
- CVE-2026-112835WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-112838WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-112836WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2026-95684VikBooking Hotel Booking Engine & PMS <= 1.8.15 - Unauthenticated Stored Cross-Site Scripting via 'attachments[name]' Parameter
- CVE-2026-95591WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-39790WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-87115VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter
- CVE-2026-84768WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability
- CVE-2026-15918VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection
- CVE-2026-16143VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting
- CVE-2026-15401VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter
- CVE-2026-15346VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parameter
- CVE-2026-6820VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Field
- CVE-2026-6818VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' Parameter
- CVE-2026-57723WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerability
- CVE-2026-12754VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' Parameter
- CVE-2026-52699WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-42683WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-42762WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-42737WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerability
- CVE-2026-25025WordPress VikRestaurants plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-49918WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerability