Known vulnerabilities in the VikBooking Hotel Booking Engine & PMS plugin
5 security advisories have been published for the VikBooking Hotel Booking Engine & PMS plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- VikBooking Hotel Booking Engine & PMS - Cross-Site Scripting (XSS) (CVE-2026-15401) HIGH
- VikBooking Hotel Booking Engine & PMS - Cross-Site Scripting (XSS) (CVE-2026-15346) MEDIUM
- VikBooking Hotel Booking Engine & PMS - Cross-Site Scripting (XSS) (CVE-2026-6820) HIGH
- VikBooking Hotel Booking Engine & PMS - Cross-Site Scripting (XSS) (CVE-2026-6818) HIGH
- VikBooking Hotel Booking Engine & PMS - Cross-Site Scripting (XSS) (CVE-2026-12754) MEDIUM
- Vikbooking Hotel Booking Engine Pms - Cross-Site Scripting (XSS) (CVE-2024-13616) MEDIUM
- Vikbooking Hotel Booking Engine Pms - Remote Code Execution (CVE-2024-11641) HIGH
- Vikbooking Hotel Booking Engine Pms - Broken Access Control (CVE-2024-2749) MEDIUM
- Vikbooking Hotel Booking Engine Pms - Security Vulnerability (CVE-2024-2441) HIGH