Read the docs

Vikwp

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Vikwp records in CISA KEV

No Vikwp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vikbooking Hotel Booking Engine & Pms 7 records MEDIUM Hotel Booking Engine & Pms 3 records LOW Vikbooking Hotel Booking Engine & Property Management System Plugin 2 records MEDIUM Car Rental Management System 1 record LOW Vik Booking 1 record LOW

Records

7 records in Vikbooking Hotel Booking Engine & Pms · all components

TI-2024-02561 CVE-2024-2749 · GHSA-h2jp-gf2g-f6fc

VikBooking < 1.6.8 - Broken Access Control

Priority MEDIUM 60

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly restrict access to its settings, permitting any users that can access a menu to manipulate requests and…

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.0028 Published 2024-05-10 Fixed in 1.6.8 CWE-284
TI-2024-12657 CVE-2024-13616 · GHSA-7wxh-2hv2-977q

VikBooking < 1.7.2 - Admin+ Stored XSS

Priority MEDIUM 55

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.7.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attac…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 1.7.2 CWE-79
TI-2024-02267 CVE-2024-2441 · GHSA-r566-fcmc-4j3v

VikBooking < 1.6.8 - Insecure Direct Object References

Priority LOW 36

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of th…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0061 Published 2024-05-10 Fixed in 1.6.8 CWE-285
Open these records in search →