Vulnerabilities in E4J s.r.l.
9 resultsVexday analysis
E4J s.r.l. apresenta perfil de risco baixo com 9 CVEs catalogadas, nenhuma sob exploração ativa conhecida e sem publicações recentes. Das vulnerabilidades registradas, apenas 2 atingem nível crítico, sendo a fraqueza dominante a Cross-Site Request Forgery (CWE-352), característica de produtos web com proteção inadequada contra CSRF.
CVE-2022-27862CRITICALWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Arbitrary File Upload leading to RCEEPSS 1.7%CVE-2022-27863MEDIUMWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Sensitive Data Exposure vulnerabilityEPSS 1.1%CVE-2024-32780MEDIUMWordPress VikRentCar Car Rental Management System plugin <= 1.3.2 - Sensitive Data Exposure via Invoices vulnerabilityEPSS 0.6%CVE-2024-39653CRITICALWordPress VikRentCar Car Rental Management System plugin <= 1.4.0 - SQL Injection vulnerabilityEPSS 0.5%CVE-2023-23998MEDIUMWordPress VikRentCar Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-24396MEDIUMWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2021-24388—Vik Rent Car < 1.1.7 - CSRF to Stored XSSEPSS 0.3%CVE-2023-32501MEDIUMWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2023-25707MEDIUMWordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%