VH
Product
Vikbooking Hotel Booking Engine & Pms
by Vikwp · last CVE May 15, 2025
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 3Low 0
Watch

Add Vikbooking Hotel Booking Engine & Pms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-11641
8.8
0%
Jan 26
VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
Affected: before 1.7.3
CVE-2023-32501
8.8
0%
Nov 9
WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: before 1.6.2
CVE-2023-25707
8.8
0%
May 23
WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: before 1.6.0
CVE-2024-2441
8.1
1%
May 10
VikBooking < 1.6.8 - Insecure Direct Object References
Affected: before 1.6.8
CVE-2024-2749
5.9
0%
May 10
VikBooking < 1.6.8 - Broken Access Control
Affected: before 1.6.8
CVE-2024-13616
4.8
0%
May 15
VikBooking < 1.7.2 - Admin+ Stored XSS
Affected: before 1.7.2
CVE-2023-24396
4.8
0%
Apr 6
WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)
Affected: before 1.5.12
Showing 7