Description
Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.12 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| E4J s.r.l. | VikBooking Hotel Booking Engine & PMS | ≤ 1.5.12 | — |
Medium · 6.3
CVE-2023-25707
EUVD-2023-29617GHSA-pv2x-9f47-7fg7
WordPress VikBooking Hotel Booking Engine & PMS Plugin <= 1.5.12 is vulnerable to Cross Site Request Forgery (CSRF)
Published May 23, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack