Lucene search
+L

83 matches found

CNNVD
CNNVD
added 2026/05/27 12:0 a.m.15 views

WordPress plugin VikBooking Hotel Booking Engine & PMS 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

8.6CVSS5.8AI score0.00345EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/05/20 6:17 p.m.16 views

WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Evan NR in WordPress Plugin VikBooking Hotel Booking Engine & PMS versions = 1.8.8...

7.1CVSS5.8AI score0.00142EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 9:31 a.m.7 views

CVE-2023-25707

Cross-Site Request Forgery CSRF vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin = 1.5.12 versions...

8.8CVSS7AI score0.00232EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:20 a.m.6 views

CVE-2024-2441

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of the VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's they...

8.1CVSS6.7AI score0.0061EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:19 a.m.4 views

CVE-2024-2749

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's access control mechanism fails to properly restrict access to its settings, permitting any users that can access a menu to manipulate requests and perform unauthorized actions such as editing, renaming or deleting categorie...

5.9CVSS6.8AI score0.0028EPSS
Exploits2References1
CNVD
CNVD
added 2025/12/25 12:0 a.m.5 views

WordPress Plugin VikBooking Hotel Booking Engine & PMS Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin VikBooking Hotel Booking...

5.9CVSS6AI score0.00279EPSS
Exploits0References1
CVE
CVE
added 2025/12/18 7:21 a.m.13 views

CVE-2025-49918

CVE-2025-49918 affects the WordPress VikBooking Hotel Booking Engine & PMS plugin. Multiple connected sources corroborate an information-disclosure flaw where embedded sensitive data can be retrieved by exploiting how data is sent, impacting VikBooking versions n/a–1.8.2 (per NVD/Red Hat/CNVD/CVE...

5.9CVSS6.5AI score0.00279EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/18 12:0 a.m.10 views

WordPress plugin VikBooking Hotel Booking Engine & PMS 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin VikBooking Hotel Booking...

5.9CVSS5.9AI score0.00279EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.6 views

WordPress plugin VikBooking Hotel Booking Engine & PMS 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

5.3CVSS6.5AI score0.00243EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/10/21 10:44 a.m.9 views

WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by an unknown individual in WordPress Plugin VikBooking Hotel Booking Engine & PMS versions = 1.8.2...

8.8CVSS7AI score0.00243EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.10 views

EUVD-2022-32350

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.01617EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-24826

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.00757EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-24723

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00524EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-32351

Malicious code in bioql PyPI...

5.3CVSS5.6AI score0.01067EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-34404

Malicious code in bioql PyPI...

8.8CVSS8.9AI score0.00334EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2022-24724

Malicious code in bioql PyPI...

4.8CVSS5.2AI score0.00577EPSS
Exploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2022-24725

Malicious code in bioql PyPI...

7.2CVSS7AI score0.01467EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/23 5:10 a.m.6 views

CVE-2023-32501

Cross-Site Request Forgery CSRF vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin = 1.6.1 versions...

8.8CVSS8AI score0.0028EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:55 a.m.4 views

CVE-2023-24396

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin = 1.5.11 versions...

5.9CVSS5.6AI score0.00392EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:18 p.m.7 views

CVE-2022-1528

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.9 does not escape the current URL before putting it back in a JavaScript context, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.5AI score0.00757EPSS
Exploits2References1
Rows per page
Query Builder