WordPress Vulnerability Scanner WPSec
Vulnerabilities / VikRentCar Car Rental Management System

VikRentCar Car Rental Management System vulnerabilities

Advisories WPSec published for VikRentCar Car Rental Management System. Other sources may list more. Its attack surface: VikRentCar Car Rental Management System on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-21 WPSEC-2026-1310 VikRentCar Car Rental Management System <= 1.4.8 - Unauthenticated Stored Cross-Site Scripting via Customer Email High 7.2 1.4.9
2026-10-21 WPSEC-2026-1309 VikRentCar Car Rental Management System <= 1.4.8 - Unauthenticated Path Traversal via Customer Details Low 3.7 1.4.9
2026-10-21 WPSEC-2026-1308 VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Arbitrary File Deletion via Customer Document Deletion Medium 6.8 1.4.9
2026-10-21 WPSEC-2026-1307 VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Multiple Administrative Actions Medium 4.3 1.4.9
2026-10-14 WPSEC-2026-0953 VikRentCar Car Rental Management System <= 1.4.7 - Unauthenticated Reflected Cross-Site Scripting via 'cid', 'vrc_active_tab', 'goto', 'vrc_lang' and 'status' Parameters Medium 6.1 1.4.8
2026-10-14 WPSEC-2026-0952 VikRentCar Car Rental Management System <= 1.4.7 - Unauthenticated Reflected Cross-Site Scripting via Booking Parameters Medium 6.1 1.4.8
2026-10-10 WPSEC-2026-0726 VikRentCar Car Rental Management System <= 1.4.6 - Reflected Cross-Site Scripting via Pagination Links Medium 6.1 1.4.7
2026-10-10 WPSEC-2026-0725 VikRentCar Car Rental Management System <= 1.4.6 - Reflected Cross-Site Scripting via Trackings Active Tab Parameter Medium 6.1 1.4.7
2026-10-10 WPSEC-2026-0724 VikRentCar Car Rental Management System <= 1.4.6 - Reflected Cross-Site Scripting via 'layoutstyle' Parameter Medium 6.1 1.4.7

License: CC BY 4.0