E4J s.r.l.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| VikBooking Hotel Booking Engine & PMS | 3 | – | Nov 9, 2023 |
| VikBooking Hotel Booking Engine & PMS (WordPress plugin) | 2 | – | Apr 19, 2022 |
| VikRentCar | 2 | – | Aug 29, 2024 |
| VikRentCar Car Rental Management System | 2 | – | Apr 6, 2023 |
Exploited and recent CVEs
- CVE-2024-39653 WordPress VikRentCar Car Rental Management System plugin <= 1.4.0 - SQL Injection vulnerability 0.5%
- CVE-2024-32780 WordPress VikRentCar Car Rental Management System plugin <= 1.3.2 - Sensitive Data Exposure via Invoices vulnerability 0.6%
- CVE-2023-32501 WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2023-25707 WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%
- CVE-2023-24396 WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-23998 WordPress VikRentCar Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2022-27863 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Sensitive Data Exposure vulnerability 1.1%
- CVE-2022-27862 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Arbitrary File Upload leading to RCE 1.7%
- CVE-2021-24388 Vik Rent Car < 1.1.7 - CSRF to Stored XSS 0.3%