E4
Vendor
e4jvikwp
6 products with CVEs on record
36
CVEs
0
On KEV
10
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116750
New
VC
VikRentCar Car Rental Management System
e4jvikwp
6.5
0%
Oct 28VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute
CVE-2026-116749
New
VC
VikRentCar Car Rental Management System
e4jvikwp
6.4
0%
Oct 28VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute
CVE-2026-111120
New
VC
VikRentCar Car Rental Management System
e4jvikwp
8.8
0%
Oct 28VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task
CVE-2026-112835
New
VI
VikRentCar
e4jvikwp
7.1
0%
Oct 23WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-112838
New
VI
VikRentCar
e4jvikwp
7.1
0%
Oct 23WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-112836
VI
VikRentCar
e4jvikwp
8.8
0%
Oct 20WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-95684
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
7.2
0%
Oct 10VikBooking Hotel Booking Engine & PMS <= 1.8.15 - Unauthenticated Stored Cross-Site Scripting via 'attachments[name]' Parameter
CVE-2026-95591
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
7.1
0%
Oct 9WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39790
VI
VikRentCar
e4jvikwp
7.1
0%
Oct 6WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-87115
VS
VikAppointments Services Booking Calendar
e4jvikwp
9.1
1%
Oct 3VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter
CVE-2026-84768
VS
VikAppointments Services Booking Calendar
e4jvikwp
9.3
0%
Sep 3WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability
CVE-2026-15918
VS
VikAppointments Services Booking Calendar
e4jvikwp
7.5
1%
Aug 5VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection
CVE-2026-16143
VF
VikRentItems Flexible Rental Management System
e4jvikwp
7.2
0%
Aug 5VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting
CVE-2026-15401
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
7.2
1%
Jul 24VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter
CVE-2026-15346
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
6.1
0%
Jul 24VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parameter
CVE-2026-6820
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
7.2
0%
Jul 8VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Field
CVE-2026-6818
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
7.2
0%
Jul 8VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' Parameter
CVE-2026-57723
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
7.4
0%
Jul 1WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerability
CVE-2026-12754
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
6.1
0%
Jul 1VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' Parameter
CVE-2026-52699
VI
VikRentCar
e4jvikwp
7.5
0%
Jun 15WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-42683
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
7.1
0%
Jun 1WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42762
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
7.1
0%
May 27WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42737
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
8.6
0%
May 27WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerability
CVE-2026-25025
VI
VikRestaurants
e4jvikwp
7.1
0%
Mar 25WordPress VikRestaurants plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-49918
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
5.9
0%
Dec 18WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerability
CVE-2025-14049
VF
VikRentItems Flexible Rental Management System
e4jvikwp
6.1
0%
Dec 12VikRentItems Flexible Rental Management System <= 1.2.0 - Reflected Cross-Site Scripting via 'delto' Parameter
CVE-2025-13724
VC
VikRentCar Car Rental Management System
e4jvikwp
7.5
0%
Dec 2VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter
CVE-2025-5803
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
5.3
0%
Nov 6WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerability
CVE-2025-57962
VI
VikRestaurants
e4jvikwp
5.9
0%
Sep 22WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-57968
VI
VikRestaurants
e4jvikwp
7.1
0%
Sep 22WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-5322
VC
VikRentCar Car Rental Management System
e4jvikwp
7.2
1%
Jul 3VikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload
CVE-2025-46251
VI
VikRestaurants
e4jvikwp
8.8
0%
Apr 22WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.3.3 - CSRF to Stored XSS vulnerability
CVE-2025-22670
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
6.5
0%
Mar 27WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.7.2 - CSRF to Settings Change vulnerability
CVE-2024-11640
VC
VikRentCar Car Rental Management System
e4jvikwp
8.8
0%
Mar 8VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
CVE-2024-11641
VH
VikBooking Hotel Booking Engine & PMS
e4jvikwp
8.8
0%
Jan 26VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
CVE-2025-22719
VS
VikAppointments Services Booking Calendar
e4jvikwp
7.1
0%
Jan 21WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability