vikwp kayıtları
vikwp üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %42,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-352 Cross-Site Request Forgery (CSRF)4
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-284 Improper Access Control1
- CWE-285 Improper Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2022-27862İstismar yok | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Arbitrary File Upload leading to RCEvikwp · vikbooking hotel booking engine \& property management system plugin · CWE-434 | Kritik9,8 | — | %1,7 | 19 Nis 2022 |
35İzleyin | CVE-2024-11641İstismar yok | VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Uploadvikwp · vikbooking hotel booking engine \& pms · CWE-352 | Yüksek8,8 | — | %0,3 | 26 Oca 2025 |
35İzleyin | CVE-2023-32501İstismar yok | WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)vikwp · vikbooking hotel booking engine \& pms · CWE-352 | Yüksek8,8 | — | %0,3 | 9 Kas 2023 |
35İzleyin | CVE-2023-25707İstismar yok | WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)vikwp · vikbooking hotel booking engine \& pms · CWE-352 | Yüksek8,8 | — | %0,2 | 23 May 2023 |
32İzleyin | CVE-2024-2441İstismar yok | VikBooking < 1.6.8 - Insecure Direct Object Referencesvikwp · vikbooking hotel booking engine \& pms · CWE-285 | Yüksek8,1 | — | %0,6 | 14 May 2024 |
28İzleyin | CVE-2022-1409İstismar yok | VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File Uploadvikwp · hotel booking engine \& pms · CWE-434 | Yüksek7,2 | — | %1,4 | 16 May 2022 |
26İzleyin | CVE-2022-1407İstismar yok | VikBooking Hotel Booking Engine & PMS < 1.5.7 - Stored Cross-Site Scripting via CSRFvikwp · hotel booking engine \& pms · CWE-352 | Orta6,5 | — | %0,5 | 16 May 2022 |
24İzleyin | CVE-2022-1528İstismar yok | VikBooking < 1.5.9 - Reflected Cross-Site Scriptingvikwp · vik booking · CWE-79 | Orta6,1 | — | %0,8 | 30 May 2022 |
23İzleyin | CVE-2024-2749İstismar yok | VikBooking < 1.6.8 - Broken Access Controlvikwp · vikbooking hotel booking engine \& pms · CWE-284 | Orta5,9 | — | %0,3 | 14 May 2024 |
21İzleyin | CVE-2022-27863İstismar yok | WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Sensitive Data Exposure vulnerabilityvikwp · vikbooking hotel booking engine \& property management system plugin · CWE-200 | Orta5,3 | — | %1,1 | 19 Nis 2022 |
19İzleyin | CVE-2021-24519İstismar yok | Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)vikwp · car rental management system · CWE-79 | Orta4,8 | — | %0,6 | 16 Ağu 2021 |
19İzleyin | CVE-2022-1408İstismar yok | VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ Stored Cross-Site Scriptingvikwp · hotel booking engine \& pms · CWE-79 | Orta4,8 | — | %0,6 | 16 May 2022 |
19İzleyin | CVE-2023-24396İstismar yok | WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)vikwp · vikbooking hotel booking engine \& pms · CWE-79 | Orta4,8 | — | %0,4 | 6 Nis 2023 |
19İzleyin | CVE-2024-13616İstismar yok | VikBooking < 1.7.2 - Admin+ Stored XSSvikwp · vikbooking hotel booking engine \& pms · CWE-79 | Orta4,8 | — | %0,3 | 15 May 2025 |
- CVE-2022-2786240Planlayın
WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Arbitrary File Upload leading to RCE
KritikCVSS 9,8İstismar yokEPSS %2vikwp · vikbooking hotel booking engine \& property management system plugin19 Nis 2022
- CVE-2024-1164135İzleyin
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %0vikwp · vikbooking hotel booking engine \& pms26 Oca 2025
- CVE-2023-3250135İzleyin
WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0vikwp · vikbooking hotel booking engine \& pms9 Kas 2023
- CVE-2023-2570735İzleyin
WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0vikwp · vikbooking hotel booking engine \& pms23 May 2023
- CVE-2024-244132İzleyin
VikBooking < 1.6.8 - Insecure Direct Object References
YüksekCVSS 8,1İstismar yokEPSS %1vikwp · vikbooking hotel booking engine \& pms14 May 2024
- CVE-2022-140928İzleyin
VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File Upload
YüksekCVSS 7,2İstismar yokEPSS %1vikwp · hotel booking engine \& pms16 May 2022
- CVE-2022-140726İzleyin
VikBooking Hotel Booking Engine & PMS < 1.5.7 - Stored Cross-Site Scripting via CSRF
OrtaCVSS 6,5İstismar yokEPSS %1vikwp · hotel booking engine \& pms16 May 2022
- CVE-2022-152824İzleyin
VikBooking < 1.5.9 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1vikwp · vik booking30 May 2022
- CVE-2024-274923İzleyin
VikBooking < 1.6.8 - Broken Access Control
OrtaCVSS 5,9İstismar yokEPSS %0vikwp · vikbooking hotel booking engine \& pms14 May 2024
- CVE-2022-2786321İzleyin
WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Sensitive Data Exposure vulnerability
OrtaCVSS 5,3İstismar yokEPSS %1vikwp · vikbooking hotel booking engine \& property management system plugin19 Nis 2022
- CVE-2021-2451919İzleyin
Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %1vikwp · car rental management system16 Ağu 2021
- CVE-2022-140819İzleyin
VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ Stored Cross-Site Scripting
OrtaCVSS 4,8İstismar yokEPSS %1vikwp · hotel booking engine \& pms16 May 2022
- CVE-2023-2439619İzleyin
WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 4,8İstismar yokEPSS %0vikwp · vikbooking hotel booking engine \& pms6 Nis 2023
- CVE-2024-1361619İzleyin
VikBooking < 1.7.2 - Admin+ Stored XSS
OrtaCVSS 4,8İstismar yokEPSS %0vikwp · vikbooking hotel booking engine \& pms15 May 2025