7.4
High
CVE-2026-57723 Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows Path Traversal
Description
Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows Path Traversal. This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.8.12.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VikBooking Hotel Booking Engine & PMS 1.8 | earliest → 1.8.12 | No fix stated |
Other CVEs of VikBooking Hotel Booking Engine & PMS
The 16 CVEs of VikBooking Hotel Booking Engine & PMS →
CVE-2026-95684
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
7.2
High
CVE-2026-95591
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp…
7.1
High
CVE-2026-15401
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
7.2
High
CVE-2026-15346
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…
6.1
Medium