| CVE-2026-85127 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.8.15 does not restrict the type of files…
|
8.8
High
|
Sep 18, 2026 |
| CVE-2024-13616 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.7.2 does not sanitise and escape some of its…
|
4.8
Medium
|
May 15, 2025 |
| CVE-2024-2749 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly…
|
5.9
Medium
|
May 10, 2024 |
| CVE-2024-2441 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an…
|
8.1
High
|
May 10, 2024 |
| CVE-2022-1528 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting…
|
Not rated
|
May 30, 2022 |
| CVE-2022-1409 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high…
|
Not rated
|
May 16, 2022 |
| CVE-2022-1408 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not escape various settings before…
|
Not rated
|
May 16, 2022 |
| CVE-2022-1407 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not have CSRF check in place when adding…
|
Not rated
|
May 16, 2022 |