Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

e4jvikwp — Vulnerabilities & Security Advisories 29

Browse all 29 CVE security advisories affecting e4jvikwp. AI-powered Chinese analysis, POCs, and references for each vulnerability.

e4jvikwp is a web application framework primarily used for building dynamic content management systems and e-commerce platforms. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its 13 recorded CVEs. The framework's modular architecture introduces complex attack surfaces, particularly in its templating and authentication components. While no major public security incidents have been widely documented, its consistent vulnerability pattern suggests ongoing challenges in secure coding practices. Developers implementing e4jvikwp should prioritize input validation and access controls to mitigate common exploitation vectors.

CVE ID Title CVSS Severity Published
CVE-2026-95591 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability — VikBooking Hotel Booking Engine & PMS CWE-79 7.1 High 2026-10-09
CVE-2026-39790 WordPress VikRentCar plugin <= 1.4.7 - Cross Site Scripting (XSS) vulnerability — VikRentCar CWE-79 7.1 High 2026-10-06
CVE-2026-87115 VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter — VikAppointments Services Booking Calendar CWE-22 9.1 Critical 2026-10-03
CVE-2026-84768 WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability — VikAppointments Services Booking Calendar CWE-89 9.3 Critical 2026-09-03
CVE-2026-15918 VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection — VikAppointments Services Booking Calendar CWE-89 7.5 High 2026-08-05
CVE-2026-16143 VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Stored Cross-Site Scripting — VikRentItems Flexible Rental Management System CWE-79 7.2 High 2026-08-05
CVE-2026-15401 VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Unauthenticated Stored Cross-Site Scripting via Custom Field 'vbfX' Parameter — VikBooking Hotel Booking Engine & PMS CWE-79 7.2 High 2026-07-24
CVE-2026-15346 VikBooking Hotel Booking Engine & PMS <= 1.8.13 - Reflected Cross-Site Scripting via 'category_id' Parameter — VikBooking Hotel Booking Engine & PMS CWE-79 6.1 Medium 2026-07-24
CVE-2026-6820 VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via Booking Form Email Field — VikBooking Hotel Booking Engine & PMS CWE-79 7.2 High 2026-07-08
CVE-2026-6818 VikBooking Hotel Booking Engine & PMS <= 1.8.8 - Unauthenticated Stored Cross-Site Scripting via 'special_requests' Parameter — VikBooking Hotel Booking Engine & PMS CWE-79 7.2 High 2026-07-08
CVE-2026-57723 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.12 - CSRF to Arbitrary File Deletion vulnerability — VikBooking Hotel Booking Engine & PMS CWE-352 7.4 High 2026-07-01
CVE-2026-12754 VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' Parameter — VikBooking Hotel Booking Engine & PMS CWE-79 6.1 Medium 2026-07-01
CVE-2026-52699 WordPress VikRentCar plugin <= 1.4.5 - Insecure Direct Object References (IDOR) vulnerability — VikRentCar CWE-639 7.5 High 2026-06-15
CVE-2026-42683 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.8 - Cross Site Scripting (XSS) vulnerability — VikBooking Hotel Booking Engine & PMS CWE-79 7.1 High 2026-06-01
CVE-2026-42762 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability — VikBooking Hotel Booking Engine & PMS CWE-79 7.1 High 2026-05-27
CVE-2026-42737 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.9 - Arbitrary File Deletion vulnerability — VikBooking Hotel Booking Engine & PMS CWE-22 8.6 High 2026-05-27
CVE-2026-25025 WordPress VikRestaurants plugin <= 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability — VikRestaurants CWE-79 7.1 High 2026-03-25
CVE-2025-49918 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Sensitive Data Exposure vulnerability — VikBooking Hotel Booking Engine & PMS CWE-201 5.9 Medium 2025-12-18
CVE-2025-14049 VikRentItems Flexible Rental Management System <= 1.2.0 - Reflected Cross-Site Scripting via 'delto' Parameter — VikRentItems Flexible Rental Management System CWE-79 6.1 Medium 2025-12-12
CVE-2025-13724 VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter — VikRentCar Car Rental Management System CWE-89 7.5 High 2025-12-02
CVE-2025-5803 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerability — VikBooking Hotel Booking Engine & PMS CWE-862 5.3 Medium 2025-11-06
CVE-2025-57962 WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability — VikRestaurants CWE-79 5.9 Medium 2025-09-22
CVE-2025-57968 WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability — VikRestaurants CWE-79 7.1 High 2025-09-22
CVE-2025-5322 VikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload — VikRentCar Car Rental Management System CWE-434 7.2 High 2025-07-03
CVE-2025-46251 WordPress VikRestaurants Table Reservations and Take-Away plugin <= 1.3.3 - CSRF to Stored XSS vulnerability — VikRestaurants CWE-352 7.1 High 2025-04-22
CVE-2025-22670 WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.7.2 - CSRF to Settings Change vulnerability — VikBooking Hotel Booking Engine & PMS CWE-862 6.5 Medium 2025-03-27
CVE-2024-11640 VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload — VikRentCar Car Rental Management System CWE-352 8.8 High 2025-03-08
CVE-2024-11641 VikBooking Hotel Booking Engine & PMS <= 1.7.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload — VikBooking Hotel Booking Engine & PMS CWE-352 8.8 High 2025-01-26
CVE-2025-22719 WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability — VikAppointments Services Booking Calendar CWE-79 7.1 High 2025-01-21

This page lists every published CVE security advisory associated with e4jvikwp. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.