CVE-2025-5322

CVE-2025-5322 affects the VikRentCar Car Rental Management System plugin for WordPress. The issue is an authenticated file upload vulnerability caused by missing file type validation in the do_updatecar and createcar functions in versions up to 1.4.3. An attacker with Administrator-level access (...

CVE-2024-32780

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in E4J s.R.L. VikRentCar.This issue affects VikRentCar: from n/a through 1.3.2...

CVE-2024-39653

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in E4J s.R.L. VikRentCar allows SQL Injection.This issue affects VikRentCar: from n/a through 1.4.0...