dbcve.org
Vulnerability index

Browse CVEs

10 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Vikbooking Hotel Booking Engine \& Pms HIGH 8.8
CVE-2024-11641

The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.…

Fix: 1.7.3+
Fix from $1,950 2025-01-26
Vikbooking Hotel Booking Engine \& Pms MEDIUM 5.9
CVE-2024-2749

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly restrict access to its settings,…

Fix: 1.6.8+
Fix from $1,600 2024-05-14
Vikbooking Hotel Booking Engine \& Pms HIGH 8.1
CVE-2024-2441

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber…

Fix: 1.6.8+
Fix from $1,950 2024-05-14
Vikbooking Hotel Booking Engine \& Pms HIGH 8.8
CVE-2023-32501

Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.6.1 versions.

Fix: 1.6.2+
Fix from $1,950 2023-11-09
Vikbooking Hotel Booking Engine \& Pms HIGH 8.8
CVE-2023-25707

Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.12 versions.

Fix: 1.6.0+
Fix from $1,950 2023-05-23
Vik Booking MEDIUM 6.1
CVE-2022-1528

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript contex…

Fix: 1.5.9+
Fix from $1,600 2022-05-30
Hotel Booking Engine \& Pms HIGH 7.2
CVE-2022-1409

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as admi…

Fix: 1.5.8+
Fix from $1,950 2022-05-16
Hotel Booking Engine \& Pms MEDIUM 6.5
CVE-2022-1407

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not have CSRF check in place when adding a tracking campaign, and does n…

Fix: 1.5.8+
Fix from $1,600 2022-05-16
Vikbooking Hotel Booking Engine \& Property Management System Plugin CRITICAL 9.8
CVE-2022-27862

Arbitrary File Upload leading to RCE in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to upload and …

Fix: after 1.5.3
Fix from $2,300 2022-04-19
Vikbooking Hotel Booking Engine \& Property Management System Plugin MEDIUM 5.3
CVE-2022-27863

Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to get the booking d…

Fix: after 1.5.3
Fix from $1,600 2022-04-19