Skip to content
Noroxi

vikwp records

14 published records for vendor vikwp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
42.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2022-27862
    40Plan

    WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Arbitrary File Upload leading to RCE

    CriticalCVSS 9.8No exploitEPSS 2%

    vikwp · vikbooking hotel booking engine \& property management system pluginApr 19, 2022

  • CVE-2024-11641
    35Monitor

    VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 0%

    vikwp · vikbooking hotel booking engine \& pmsJan 26, 2025

  • CVE-2023-32501
    35Monitor

    WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    vikwp · vikbooking hotel booking engine \& pmsNov 9, 2023

  • CVE-2023-25707
    35Monitor

    WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    vikwp · vikbooking hotel booking engine \& pmsMay 23, 2023

  • CVE-2024-2441
    32Monitor

    VikBooking < 1.6.8 - Insecure Direct Object References

    HighCVSS 8.1No exploitEPSS 1%

    vikwp · vikbooking hotel booking engine \& pmsMay 14, 2024

  • CVE-2022-1409
    28Monitor

    VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File Upload

    HighCVSS 7.2No exploitEPSS 1%

    vikwp · hotel booking engine \& pmsMay 16, 2022

  • CVE-2022-1407
    26Monitor

    VikBooking Hotel Booking Engine & PMS < 1.5.7 - Stored Cross-Site Scripting via CSRF

    MediumCVSS 6.5No exploitEPSS 1%

    vikwp · hotel booking engine \& pmsMay 16, 2022

  • CVE-2022-1528
    24Monitor

    VikBooking < 1.5.9 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    vikwp · vik bookingMay 30, 2022

  • CVE-2024-2749
    23Monitor

    VikBooking < 1.6.8 - Broken Access Control

    MediumCVSS 5.9No exploitEPSS 0%

    vikwp · vikbooking hotel booking engine \& pmsMay 14, 2024

  • CVE-2022-27863
    21Monitor

    WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Sensitive Data Exposure vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    vikwp · vikbooking hotel booking engine \& property management system pluginApr 19, 2022

  • CVE-2021-24519
    19Monitor

    Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 1%

    vikwp · car rental management systemAug 16, 2021

  • CVE-2022-1408
    19Monitor

    VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 1%

    vikwp · hotel booking engine \& pmsMay 16, 2022

  • CVE-2023-24396
    19Monitor

    WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 0%

    vikwp · vikbooking hotel booking engine \& pmsApr 6, 2023

  • CVE-2024-13616
    19Monitor

    VikBooking < 1.7.2 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    vikwp · vikbooking hotel booking engine \& pmsMay 15, 2025