| CVE-2026-85127 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.8.15 does not restrict the type of files…
|
8.8
Élevée
|
18 sept. 2026 |
| CVE-2024-13616 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.7.2 does not sanitise and escape some of its…
|
4.8
Moyenne
|
15 mai 2025 |
| CVE-2024-2749 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly…
|
5.9
Moyenne
|
10 mai 2024 |
| CVE-2024-2441 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an…
|
8.1
Élevée
|
10 mai 2024 |
| CVE-2022-1528 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting…
|
Non notée
|
30 mai 2022 |
| CVE-2022-1409 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high…
|
Non notée
|
16 mai 2022 |
| CVE-2022-1408 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not escape various settings before…
|
Non notée
|
16 mai 2022 |
| CVE-2022-1407 |
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not have CSRF check in place when adding…
|
Non notée
|
16 mai 2022 |