VI
Vendor
Vikwp
14
CVEs
0
On KEV
0
New 30D
Products
VH8.8
Vikbooking Hotel Booking Engine & Pms
Vikwp
7 CVEs0 on KEV0 new
HB7.2
Hotel Booking Engine & Pms
Vikwp
3 CVEs0 on KEV0 new
VH9.8
Vikbooking Hotel Booking Engine & Property Management System Plugin
Vikwp
2 CVEs0 on KEV0 new
CR4.8
Car Rental Management System
Vikwp
1 CVEs0 on KEV0 new
VB6.1
Vik Booking
Vikwp
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-13616 | VH Vikbooking Hotel Booking Engine & Pms Vikwp | 4.8 | May 15 | VikBooking < 1.7.2 - Admin+ Stored XSS |
| CVE-2024-11641 | VH Vikbooking Hotel Booking Engine & Pms Vikwp | 8.8 | Jan 26 | VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2024-2749 | VH Vikbooking Hotel Booking Engine & Pms Vikwp | 5.9 | May 10 | VikBooking < 1.6.8 - Broken Access Control |
| CVE-2024-2441 | VH Vikbooking Hotel Booking Engine & Pms Vikwp | 8.1 | May 10 | VikBooking < 1.6.8 - Insecure Direct Object References |
| CVE-2023-32501 | VH Vikbooking Hotel Booking Engine & Pms Vikwp | 8.8 | Nov 9 | WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-25707 | VH Vikbooking Hotel Booking Engine & Pms Vikwp | 8.8 | May 23 | WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-24396 | VH Vikbooking Hotel Booking Engine & Pms Vikwp | 4.8 | Apr 6 | WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-1528 | VB Vik Booking Vikwp | 6.1 | May 30 | VikBooking < 1.5.9 - Reflected Cross-Site Scripting |
| CVE-2022-1409 | HB Hotel Booking Engine & Pms Vikwp | 7.2 | May 16 | VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File Upload |
| CVE-2022-1408 | HB Hotel Booking Engine & Pms Vikwp | 4.8 | May 16 | VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ Stored Cross-Site Scripting |
| CVE-2022-1407 | HB Hotel Booking Engine & Pms Vikwp | 6.5 | May 16 | VikBooking Hotel Booking Engine & PMS < 1.5.7 - Stored Cross-Site Scripting via CSRF |
| CVE-2022-27863 | VH Vikbooking Hotel Booking Engine & Property Management System Plugin Vikwp | 5.3 | Apr 19 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Sensitive Data Exposure vulnerability |
| CVE-2022-27862 | VH Vikbooking Hotel Booking Engine & Property Management System Plugin Vikwp | 9.8 | Apr 19 | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Arbitrary File Upload leading to RCE |
| CVE-2021-24519 | CR Car Rental Management System Vikwp | 4.8 | Aug 16 | Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) |