Log in Start free

e4jvikwp

Products

ProductCVEsExploitedLatest
VikBooking Hotel Booking Engine & PMS15–Oct 10, 2026
VikRentCar Car Rental Management System8–Oct 31, 2026
VikRentCar7–Oct 30, 2026
VikAppointments Services Booking Calendar4–Oct 3, 2026
VikRestaurants4–Mar 25, 2026
VikRentItems Flexible Rental Management System2–Aug 5, 2026

Exploited and recent CVEs

  • CVE-2026-116548 High 7.2 VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter 0.5%
  • CVE-2026-115840 High 7.2 VikRentCar Car Rental Management System <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via 'poplink' Parameter 0.2%
  • CVE-2026-116405 High 7.1 WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-28160 High 7.1 WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-116750 Medium 6.5 VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute 0.3%
  • CVE-2026-116749 Medium 6.4 VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute 0.2%
  • CVE-2026-111120 High 8.8 VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task 0.3%
  • CVE-2026-112835 High 7.1 WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-112838 High 7.1 WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-112836 High 8.8 WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2026-95684 High 7.2 VikBooking Hotel Booking Engine & PMS <= 1.8.15 - Unauthenticated Stored Cross-Site Scripting via 'attachments[name]' Parameter 0.2%
  • CVE-2026-95591 High 7.1 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-39790 High 7.1 WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-87115 Critical 9.1 VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter 0.9%
  • CVE-2026-84768 Critical 9.3 WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability 0.4%
  • CVE-2026-15918 High 7.5 VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection 0.5%
  • CVE-2026-16143 High 7.2 VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting 0.4%
  • CVE-2026-15401 High 7.2 VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter 0.6%
  • CVE-2026-15346 Medium 6.1 VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parameter 0.5%
  • CVE-2026-6820 High 7.2 VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Field 0.4%
  • CVE-2026-6818 High 7.2 VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' Parameter 0.4%
  • CVE-2026-57723 High 7.4 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerability 0.2%
  • CVE-2026-12754 Medium 6.1 VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' Parameter 0.4%
  • CVE-2026-52699 High 7.5 WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2026-42683 High 7.1 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-42762 High 7.1 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-42737 High 8.6 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2026-25025 High 7.1 WordPress VikRestaurants plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-49918 Medium 5.9 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-14049 Medium 6.1 VikRentItems Flexible Rental Management System <= 1.2.0 - Reflected Cross-Site Scripting via 'delto' Parameter 0.3%