6.5
Medium
CVE-2025-22670 Missing Authorization vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Exploiting…
Description
Missing Authorization vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through <= 1.7.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VikBooking Hotel Booking Engine & PMS 1.7 | earliest → 1.7.2 | No fix stated |
Other CVEs of VikBooking Hotel Booking Engine & PMS
The 16 CVEs of VikBooking Hotel Booking Engine & PMS →
CVE-2026-95684
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
7.2
High
CVE-2026-95591
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp…
7.1
High
CVE-2026-15401
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
7.2
High
CVE-2026-15346
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…
6.1
Medium