Vulnerabilities > Vikwp > Vikbooking Hotel Booking Engine PMS > 1.0.15

DATE CVE VULNERABILITY TITLE RISK
2025-01-26 CVE-2024-11641 Cross-Site Request Forgery (CSRF) vulnerability in Vikwp Vikbooking Hotel Booking Engine & PMS
The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.2.
network
low complexity
vikwp CWE-352
8.8
8.8
2023-11-09 CVE-2023-32501 Unspecified vulnerability in Vikwp Vikbooking Hotel Booking Engine & PMS
Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L.
network
low complexity
vikwp
8.8
8.8
2023-05-23 CVE-2023-25707 Unspecified vulnerability in Vikwp Vikbooking Hotel Booking Engine & PMS
Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L.
network
low complexity
vikwp
8.8
8.8
2023-04-06 CVE-2023-24396 Cross-site Scripting vulnerability in Vikwp Vikbooking Hotel Booking Engine & PMS
Auth.
network
low complexity
vikwp CWE-79
4.8
4.8