Vendor

    E4j S.r.l.

    9 known vulnerabilities in products by E4j S.r.l., 0 of them actively exploited (CISA KEV).

    Key figures

    9

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in E4j S.r.l.
    CriticalCVE-2022-27862

    E4J s.r.l. VikBooking Hotel Booking Engine & PMS (WordPress plugin): Unrestricted Upload of File with Dangerous Type

    also in 1 other product

    		9.8
    CriticalCVE-2024-39653

    WordPress VikRentCar Car Rental Management System plugin <= 1.4.0 - SQL Injection vulnerability

    also in 1 other product

    		9.3
    MediumCVE-2022-27863

    E4J s.r.l. VikBooking Hotel Booking Engine & PMS (WordPress plugin): Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		5.3
    MediumCVE-2024-32780

    E4J s.r.l. VikRentCar: Exposure of Sensitive Information to an Unauthorized Actor

    		5.9
    MediumCVE-2023-24396

    E4J s.r.l. VikBooking Hotel Booking Engine & PMS: Cross-site Scripting

    also in 1 other product

    		5.9
    MediumCVE-2023-23998

    WordPress VikRentCar Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		5.9
    HighCVE-2023-25707

    E4J s.r.l. VikBooking Hotel Booking Engine & PMS: Cross-Site Request Forgery (CSRF)

    also in 1 other product

    		6.3
    MediumCVE-2021-24388

    Vik Rent Car < 1.1.7 - CSRF to Stored XSS

    		5.4
    HighCVE-2023-32501

    E4J s.r.l. VikBooking Hotel Booking Engine & PMS: Cross-Site Request Forgery (CSRF)

    also in 1 other product

    		4.3

    Products

    Products by E4j S.r.l.
    Vikbooking Hotel Booking Engine & Pms30