CVE-2024-1845

CVE-2024-1845 applies to VikRentCar Car Rental Management System WordPress plugin (≤1.3.1) and is caused by missing CSRF checks in certain areas, allowing a logged-in attacker to induce unwanted actions via CSRF. Red Hat/Patchstack entries corroborate a CSRF vulnerability with a fixed version in ...

CVE-2024-11640

The VikRentCar Car Rental Management System WordPress plugin (versions up to 1.4.2) is affected by a Cross-Site Request Forgery (CSRF) due to missing/incorrect nonce validation on the save function. This enables unauthenticated attackers to manipulate plugin access via forged requests that trick ...

CVE-2024-39653

CVE-2024-39653 describes an unauthenticated SQL Injection in the WordPress VikRentCar Car Rental Management System plugin (<= 1.4.0). The vulnerability stems from improper neutralization of input elements in the plugin’s SQL queries, enabling an attacker to craft payloads that could compromise...

CVE-2023-23998

The CVE-2023-23998 entry concerns the WordPress VikRentCar plugin, affected versions

CVE-2025-5322

CVE-2025-5322 affects the VikRentCar Car Rental Management System plugin for WordPress. The issue is an authenticated file upload vulnerability caused by missing file type validation in the do_updatecar and createcar functions in versions up to 1.4.3. An attacker with Administrator-level access (...