Skip to content
OpenAdvisories

Vendor

e4jvikwp

41 known vulnerabilities.

Products

VikBooking Hotel Booking Engine & PMS 16 VikRentCar Car Rental Management System 8 VikRentCar 7 VikAppointments Services Booking Calendar 4 VikRestaurants 4 VikRentItems Flexible Rental Management System 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-87115

    VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter

    The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the extract function in all versions up to, and including, 1.2.21. This makes it possible for unauthenticat…

    e4jvikwp VikAppointments Services Booking Calendar Web / CMS
  • Critical 9.3
    CVE-2026-84768

    WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability

    Unauthenticated SQL Injection in VikAppointments Services Booking Calendar <= 1.2.20 versions.

    e4jvikwp VikAppointments Services Booking Calendar