VikBooking Hotel Booking Engine & PMS vulnerabilities
We track 4 vulnerabilities in VikBooking Hotel Booking Engine & PMS products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
Latest VikBooking Hotel Booking Engine & PMS vulnerabilities
- 8.8 High severity
VikBooking Hotel Booking Engine & PMS: Improper Neutralization of Input During Web Page Generation
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.8.15 does not restrict the type of files unauthenticated visitors may attach to its live chat, nor sanitize their contents, allowing them to store active content which is executed in the conte
- 8.1 High severity
VikBooking Hotel Booking Engine & PMS: Improper Authorization
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of the VikBooking Hotel Booking Engine & PMS
- 7.1 High severity
VikBooking Hotel Booking Engine & PMS: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VikBooking Hotel Booking Engine & PMS allows Reflected XSS.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through 1.6.7.
- 7.2 High severity
VikBooking Hotel Booking Engine & PMS: Unrestricted Upload of File with Dangerous Type
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as administrators to upload PHP files disguised as images and containing malicious PHP code