Vikwp vulnerabilities
We track 2 vulnerabilities in Vikwp products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 16, 2022.
2vulnerabilities
1critical
1high
0exploited
8.5average CVSS score
Latest Vikwp vulnerabilities
- 7.2 High severity
VikBooking Hotel Booking Engine & PMS: Unrestricted Upload of File with Dangerous Type
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as administrators to upload PHP files disguised as images and containing malicious PHP code
- 9.8 Critical severity
VikBooking Hotel Booking Engine & PMS…: Unrestricted Upload of File with Dangerous Type
Arbitrary File Upload leading to RCE in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to upload and execute dangerous file types (e.g. PHP shell) via the signature upload on the booking form.