Skip to content
OpenAdvisories

Product · e4jvikwp

VikRentCar

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.1
    CVE-2026-116405

    WordPress VikRentCar plugin <= 1.4.9 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.9 versions.

    e4jvikwp VikRentCar
  • High 7.1
    CVE-2026-28160

    WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Stored XSS.This issue affects VikRentCar: from n/a through 1.4.10.

    e4jvikwp VikRentCar
  • High 7.1
    CVE-2026-112835

    WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.8.

    e4jvikwp VikRentCar
  • High 7.1
    CVE-2026-112838

    WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Stored XSS.This issue affects VikRentCar: from n/a through 1.4.8.

    e4jvikwp VikRentCar
  • High 8.8
    CVE-2026-112836

    WordPress VikRentCar plugin <= 1.4.8 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site Request Forgery.This issue affects VikRentCar: from n/a through 1.4.8.

    e4jvikwp VikRentCar
  • High 7.1
    CVE-2026-39790

    WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.7.

    e4jvikwp VikRentCar
  • High 7.5
    CVE-2026-52699

    WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability

    Unauthenticated Insecure Direct Object References (IDOR) in VikRentCar <= 1.4.5 versions.

    e4jvikwp VikRentCar