VikRentCar Car Rental Management System vulnerabilities

6 known vulnerabilities in VikRentCar Car Rental Management System from E4jvikwp. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  VikRentCar Car Rental Management System: Improper Neutralization of Input During Web Page Generation

  CVE-2026-116548Oct 31, 2026E4jvikwp

  The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'optionals' parameter in all versions up to, and including, 1.4.10 due to insufficient input sanitization and output escaping. This makes it p

• 7.2 High severity

  VikRentCar Car Rental Management System: Improper Neutralization of Input During Web Page Generation

  CVE-2026-115840Oct 31, 2026E4jvikwp

  The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'poplink' parameter in all versions up to, and including, 1.4.9 due to insufficient input sanitization and output escaping. This makes it poss

• 8.8 High severity

  VikRentCar Car Rental Management System: Cross-Site Request Forgery

  CVE-2026-111120Oct 28, 2026E4jvikwp

  The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.8. This is due to missing or incorrect nonce validation on the condtext_update_tmpl function. This makes it p

• 7.5 High severity

  VikRentCar Car Rental Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-13724Dec 2, 2025E4jvikwp

  The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'month' parameter in all versions up to, and including, 1.4.4 due to insufficient escaping on the user supplied parameter and lack of suffi

• 7.2 High severity

  VikRentCar Car Rental Management System: Unrestricted Upload of File with Dangerous Type

  CVE-2025-5322Jul 3, 2025E4jvikwp

  The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the do_updatecar and createcar functions in all versions up to, and including, 1.4.3. This makes it possible for aut

• 8.8 High severity

  VikRentCar Car Rental Management System: Cross-Site Request Forgery

  CVE-2024-11640Mar 8, 2025E4jvikwp

  The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due to missing or incorrect nonce validation on the 'save' function. This makes it possible for un