Browse CVEs

HIGH 8.8 CVE-2024-11641 The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.… Vikbooking Hotel Booking Engine \& Pms 1.7.3+ Fix from $1,9502025-01-26 MEDIUM 5.9 CVE-2024-2749 The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly restrict access to its settings,… Vikbooking Hotel Booking Engine \& Pms 1.6.8+ Fix from $1,6002024-05-14 HIGH 8.1 CVE-2024-2441 The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber… Vikbooking Hotel Booking Engine \& Pms 1.6.8+ Fix from $1,9502024-05-14 HIGH 8.8 CVE-2023-32501 Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.6.1 versions. Vikbooking Hotel Booking Engine \& Pms 1.6.2+ Fix from $1,9502023-11-09 HIGH 8.8 CVE-2023-25707 Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.12 versions. Vikbooking Hotel Booking Engine \& Pms 1.6.0+ Fix from $1,9502023-05-23 MEDIUM 6.1 CVE-2022-1528 The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript contex… Vik Booking 1.5.9+ Fix from $1,6002022-05-30 HIGH 7.2 CVE-2022-1409 The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as admi… Hotel Booking Engine \& Pms 1.5.8+ Fix from $1,9502022-05-16 MEDIUM 6.5 CVE-2022-1407 The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not have CSRF check in place when adding a tracking campaign, and does n… Hotel Booking Engine \& Pms 1.5.8+ Fix from $1,6002022-05-16 CRITICAL 9.8 CVE-2022-27862 Arbitrary File Upload leading to RCE in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to upload and … Vikbooking Hotel Booking Engine \& Property Management System Plugin after 1.5.3 Fix from $2,3002022-04-19 MEDIUM 5.3 CVE-2022-27863 Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to get the booking d… Vikbooking Hotel Booking Engine \& Property Management System Plugin after 1.5.3 Fix from $1,6002022-04-19