Vulnerabilities in e4jvikwp

25 results
Vexday analysis

O fornecedor e4jvikwp apresenta 21 vulnerabilidades catalogadas, com 8 delas publicadas nos últimos 90 dias, indicando atividade recente. Nenhuma vulnerabilidade está sob ataque ativo (KEV) ou classificada como crítica, mas a fraqueza dominante é Cross-site Scripting (CWE-79), típica de aplicações web. O risco atual é moderado, concentrado em exposições de impacto limitado que requerem monitoramento contínuo.

CVE-2025-5322HIGHVikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File UploadEPSS 0.6%CVE-2026-15918HIGHVikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL InjectionEPSS 0.4%CVE-2026-42737HIGHWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerabilityEPSS 0.4%CVE-2026-15401HIGHVikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' ParameterEPSS 0.3%CVE-2025-22670MEDIUMWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.7.2 - CSRF to Settings Change vulnerabilityEPSS 0.3%CVE-2024-11641HIGHVikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.3%CVE-2025-57968HIGHWordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-13724HIGHVikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' ParameterEPSS 0.3%CVE-2024-11640HIGHVikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.3%CVE-2025-57962MEDIUMWordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-49918MEDIUMWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-15346MEDIUMVikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' ParameterEPSS 0.3%CVE-2025-14049MEDIUMVikRentItems Flexible Rental Management System <= 1.2.0 - Reflected Cross-Site Scripting via 'delto' ParameterEPSS 0.3%CVE-2025-22719HIGHWordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerabilityEPSS 0.3%CVE-2025-5803MEDIUMWordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-6818HIGHVikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' ParameterEPSS 0.2%CVE-2026-16143HIGHVikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-25025HIGHWordPress VikRestaurants plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-52699HIGHWordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-6820HIGHVikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email FieldEPSS 0.2%