CVE-2026-84768: falha crítica em e4jvikwp VikAppointments Services Booking…
WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.4%
Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Produtos afetados
e4jvikwp · VikAppointments Services Booking CalendarCVEs relacionadas — e4jvikwp VikAppointments Services Booking…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-87115CRITICALVikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' ParameterEPSS 0.9%CVE-2026-15918HIGHVikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL InjectionEPSS 0.5%CVE-2025-22719HIGHWordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerabilityEPSS 0.3%