Skip to content
OpenAdvisories

Vendor

E4J s.r.l.

9 known vulnerabilities.

Products

VikBooking Hotel Booking Engine & PMS 3 VikRentCar 2 VikBooking Hotel Booking Engine & PMS (WordPress plugin) 2 VikRentCar Car Rental Management System 2
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 5.9
    CVE-2024-32780

    WordPress VikRentCar Car Rental Management System plugin <= 1.3.2 - Sensitive Data Exposure via Invoices vulnerability

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in E4J s.R.L. VikRentCar.This issue affects VikRentCar: from n/a through 1.3.2.

    E4J s.r.l. VikRentCar
  • Medium 4.3
    CVE-2023-32501

    WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.6.1 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.6.1 versions.

    E4J s.r.l. VikBooking Hotel Booking Engine & PMS
  • Medium 6.3
    CVE-2023-25707

    WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.12 versions.

    E4J s.r.l. VikBooking Hotel Booking Engine & PMS
  • Medium 5.9
    CVE-2023-24396

    WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.11 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.11 versions.

    E4J s.r.l. VikBooking Hotel Booking Engine & PMS
  • Medium 5.9
    CVE-2023-23998

    WordPress VikRentCar Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikRentCar Car Rental Management System plugin <= 1.3.0 versions.

    E4J s.r.l. VikRentCar Car Rental Management System
  • Medium 5.3
    CVE-2022-27863

    WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 - Sensitive Data Exposure vulnerability

    Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to get the booking data by guessing / brute-forcing easy predictable booking IDs via search POST requests.

    E4J s.r.l. VikBooking Hotel Booking Engine & PMS (WordPress plugin) Web / CMS