Known vulnerabilities in the Vikbooking plugin
17 security advisories have been published for the Vikbooking plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Vikbooking - Security Vulnerability (CVE-2026-95684) HIGH
- Vikbooking - Security Vulnerability (CVE-2026-95591) HIGH
- Vikbooking - Cross-Site Scripting (XSS) (CVE-2026-15401) HIGH
- Vikbooking - Cross-Site Scripting (XSS) (CVE-2026-15346) MEDIUM
- Vikbooking - Cross-Site Scripting (XSS) (CVE-2026-6820) HIGH
- Vikbooking - Cross-Site Scripting (XSS) (CVE-2026-6818) HIGH
- Vikbooking - Path Traversal (CVE-2026-57723) HIGH
- Vikbooking - Cross-Site Scripting (XSS) (CVE-2026-12754) MEDIUM
- Vikbooking - Cross-Site Scripting (XSS) (CVE-2026-42683) HIGH
- Vikbooking - Cross-Site Scripting (XSS) (CVE-2026-42762) HIGH
- Vikbooking - Path Traversal (CVE-2026-42737) HIGH
- Vikbooking - Information Disclosure (CVE-2025-49918) MEDIUM
- Vikbooking - Broken Access Control (CVE-2025-5803) MEDIUM
- Vikbooking - Broken Access Control (CVE-2025-22670) MEDIUM
- Vikbooking - Remote Code Execution (CVE-2024-11641) HIGH
- Vikbooking - Remote Code Execution (CVE-2022-27862) CRITICAL
- Vikbooking - Information Disclosure (CVE-2022-27863) MEDIUM