Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: VikBooking Hotel Booking Engine & PMS 1.6.8 Clear all filters
TI-2024-02561 CVE-2024-2749 · GHSA-h2jp-gf2g-f6fc

VikBooking < 1.6.8 - Broken Access Control

Priority MEDIUM 60

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly restrict access to its settings, permitting any users that can access a menu to manipulate requests and…

CVSS 3.1MEDIUM 5.9 Local No auth No interaction EPSS 0.0028 Published 2024-05-10 Fixed in 1.6.8 CWE-284
TI-2024-02267 CVE-2024-2441 · GHSA-r566-fcmc-4j3v

VikBooking < 1.6.8 - Insecure Direct Object References

Priority LOW 36

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of th…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0061 Published 2024-05-10 Fixed in 1.6.8 CWE-285