What’s Vulnerable › Products

e4jvikwp VikBooking Hotel Booking Engine & PMS vulnerabilities

21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.

Check whether your e4jvikwp VikBooking Hotel Booking Engine & PMS version is affected

Latest e4jvikwp VikBooking Hotel Booking Engine & PMS vulnerabilities

• CVE-2026-95684 — VikBooking Hotel Booking Engine & PMS <= 1.8.15 - Unauthenticated Stored Cross-Site Scripting via 'attachments[name]' Parameter (CVSS 7.2)
• CVE-2026-95591 — WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-15401 — VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter (CVSS 7.2)
• CVE-2026-15346 — VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parameter (CVSS 6.1)
• CVE-2026-6820 — VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Field (CVSS 7.2)
• CVE-2026-6818 — VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' Parameter (CVSS 7.2)
• CVE-2026-57723 — WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerability (CVSS 7.4)
• CVE-2026-12754 — VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' Parameter (CVSS 6.1)
• CVE-2026-42683 — WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-42762 — WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-42737 — WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerability (CVSS 8.6)
• CVE-2025-49918 — WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerability (CVSS 5.9)
• CVE-2025-5803 — WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2024-13616 — VikBooking < 1.7.2 - Admin+ Stored XSS (CVSS 4.8)
• CVE-2025-22670 — WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.7.2 - CSRF to Settings Change vulnerability (CVSS 6.5)
• CVE-2024-11641 — VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
• CVE-2024-2749 — VikBooking < 1.6.8 - Broken Access Control (CVSS 5.9)
• CVE-2024-2441 — VikBooking < 1.6.8 - Insecure Direct Object References (CVSS 8.1)
• CVE-2023-32501 — WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2023-25707 — WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2023-24396 — WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)