CVE-2026-42683

The CVE-2026-42683 entry concerns the WordPress plugin VikBooking Hotel Booking Engine & PMS, affected through version 1.8.8. The issue is an Improper Neutralization of Input During Web Page Generation, i.e., a DOM-based Cross-Site Scripting (XSS) vulnerability. The root cause, as stated, is impr...

EUVD-2024-30365

Malicious code in bioql PyPI...

CVE-2022-1409

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as administrators to upload PHP files disguised as images and containing malicious PHP code...

CVE-2024-11641

CVE-2024-11641 affects the VikBooking Hotel Booking Engine & PMS plugin for WordPress (versions ≤ 1.7.2). The issue is a Cross-Site Request Forgery vulnerability caused by missing or incorrect nonce validation on the plugin’s save function. This can allow unauthenticated attackers with subscriber...