Critical · 9.3 CVE-2024-39653 EUVD-2024-38158GHSA-mpm3-6hq8-5x2v

WordPress VikRentCar Car Rental Management System plugin <= 1.4.0 - SQL Injection vulnerability

Published Aug 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E4J s.R.L. VikRentCar allows SQL Injection.This issue affects VikRentCar: from n/a through 1.4.0.

Affected products

Vendor	Product	Affected	Fixed
E4J s.r.l.	VikRentCar	≤ 1.4.0	—

References

https://patchstack.com/database/vulnerability/vikrentcar/wordpress-vikrentcar-car-rental-management-system-plugin-1-4-0-sql-injection-vulnerability?_s_id=cve vdb-entry