E4
Vendor
e4jvikwp
24
CVEs
0
On KEV
10
New 30D
Products
VI8.8
VikRentCar
e4jvikwp
5 CVEs0 on KEV4 new
VS9.3
VikAppointments Services Booking Calendar
e4jvikwp
3 CVEs0 on KEV1 new
VC8.8
VikRentCar Car Rental Management System
e4jvikwp
3 CVEs0 on KEV3 new
VH8.6
VikBooking Hotel Booking Engine & PMS
e4jvikwp
11 CVEs0 on KEV2 new
VF7.2
VikRentItems Flexible Rental Management System
e4jvikwp
1 CVEs0 on KEV0 new
VI7.1
VikRestaurants
e4jvikwp
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116750 New | VC VikRentCar Car Rental Management System e4jvikwp | 6.5 | Oct 28 | VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute |
| CVE-2026-116749 New | VC VikRentCar Car Rental Management System e4jvikwp | 6.4 | Oct 28 | VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute |
| CVE-2026-111120 New | VC VikRentCar Car Rental Management System e4jvikwp | 8.8 | Oct 28 | VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task |
| CVE-2026-112835 New | VI VikRentCar e4jvikwp | 7.1 | Oct 23 | WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-112838 New | VI VikRentCar e4jvikwp | 7.1 | Oct 23 | WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-112836 | VI VikRentCar e4jvikwp | 8.8 | Oct 20 | WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-95684 | VH VikBooking Hotel Booking Engine & PMS e4jvikwp | 7.2 | Oct 10 | VikBooking Hotel Booking Engine & PMS <= 1.8.15 - Unauthenticated Stored Cross-Site Scripting via 'attachments[name]' Parameter |
| CVE-2026-95591 | VH VikBooking Hotel Booking Engine & PMS e4jvikwp | 7.1 | Oct 9 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-39790 | VI VikRentCar e4jvikwp | 7.1 | Oct 6 | WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-87115 | VS VikAppointments Services Booking Calendar e4jvikwp | 9.1 | Oct 3 | VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter |
| CVE-2026-84768 | VS VikAppointments Services Booking Calendar e4jvikwp | 9.3 | Sep 3 | WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability |
| CVE-2026-15918 | VS VikAppointments Services Booking Calendar e4jvikwp | 7.5 | Aug 5 | VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection |
| CVE-2026-16143 | VF VikRentItems Flexible Rental Management System e4jvikwp | 7.2 | Aug 5 | VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2026-15401 | VH VikBooking Hotel Booking Engine & PMS e4jvikwp | 7.2 | Jul 24 | VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter |
| CVE-2026-15346 | VH VikBooking Hotel Booking Engine & PMS e4jvikwp | 6.1 | Jul 24 | VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parameter |
| CVE-2026-6820 | VH VikBooking Hotel Booking Engine & PMS e4jvikwp | 7.2 | Jul 8 | VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Field |
| CVE-2026-6818 | VH VikBooking Hotel Booking Engine & PMS e4jvikwp | 7.2 | Jul 8 | VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' Parameter |
| CVE-2026-57723 | VH VikBooking Hotel Booking Engine & PMS e4jvikwp | 7.4 | Jul 1 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerability |
| CVE-2026-12754 | VH VikBooking Hotel Booking Engine & PMS e4jvikwp | 6.1 | Jul 1 | VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' Parameter |
| CVE-2026-52699 | VI VikRentCar e4jvikwp | 7.5 | Jun 15 | WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability |
| CVE-2026-42683 | VH VikBooking Hotel Booking Engine & PMS e4jvikwp | 7.1 | Jun 1 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-42762 | VH VikBooking Hotel Booking Engine & PMS e4jvikwp | 7.1 | May 27 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-42737 | VH VikBooking Hotel Booking Engine & PMS e4jvikwp | 8.6 | May 27 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerability |
| CVE-2026-25025 | VI VikRestaurants e4jvikwp | 7.1 | Mar 25 | WordPress VikRestaurants plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability |