What’s Vulnerable › Products

e4jvikwp VikRentCar vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your e4jvikwp VikRentCar version is affected

Latest e4jvikwp VikRentCar vulnerabilities

• CVE-2026-116548 — VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter (CVSS 7.2)
• CVE-2026-115840 — VikRentCar Car Rental Management System <= 1.4.9 - Unauthenticated Stored Cross-Site Scripting via 'poplink' Parameter (CVSS 7.2)
• CVE-2026-116405 — WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-28160 — WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-116750 — VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute (CVSS 6.5)
• CVE-2026-116749 — VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute (CVSS 6.4)
• CVE-2026-111120 — VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task (CVSS 8.8)
• CVE-2026-112838 — WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-112835 — WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-112836 — WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.8)
• CVE-2026-39790 — WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-52699 — WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability (CVSS 7.5)
• CVE-2025-13724 — VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter (CVSS 7.5)
• CVE-2025-5322 — VikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload (CVSS 7.2)
• CVE-2024-11640 — VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
• CVE-2024-39653 — WordPress VikRentCar Car Rental Management System plugin <= 1.4.0 - SQL Injection vulnerability (CVSS 9.8)
• CVE-2024-1845 — VikRentCar Car Rental Management System < 1.3.2 - Cross Site Request Forgery (CVSS 8.8)
• CVE-2023-23998 — WordPress VikRentCar Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)