E4j S.r.l. Vikbooking Hotel Booking Engine & Pms (WordPress Plugin)
2 CVEs affecting E4j S.r.l. Vikbooking Hotel Booking Engine & Pms (WordPress Plugin). Latest disclosed: 2022-04-19. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-27862 | Critical | 9.8 | 2022-04-19 | Arbitrary File Upload leading to RCE in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to upload and execute da… |
CVE-2022-27863 | Medium | 5.3 | 2022-04-19 | Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to get the booking data by gue… |