Read the docs

E4jconnect

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

E4jconnect records in CISA KEV

No E4jconnect vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records

Priority HIGH 73

The VikRentCar Car Rental Management System WordPress plugin before 1.3.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00286 Published 2024-07-11 Fixed in 1.3.2 CWE-352
Priority LOW 35

The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the do_updatecar and createcar functions in all versions up to, and includin…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00757 Published 2025-07-03 No fix listed CWE-434
Open these records in search →