Vendor
E4J s.r.l.
14 known vulnerabilities in products by E4J s.r.l., 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-27862 | E4J s.r.l. VikBooking Hotel Booking Engine & PMS (WordPress plugin): Unrestricted Upload of File with Dangerous Type | 9.8 | |
| High | CVE-2022-1409 | VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ PHP File Upload | 7.2 | |
| High | CVE-2024-2441 | VikBooking < 1.6.8 - Insecure Direct Object References | 8.1 | |
| Medium | CVE-2022-27863 | E4J s.r.l. VikBooking Hotel Booking Engine & PMS (WordPress plugin): Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| High | CVE-2024-11641 | E4jvikwp VikBooking Hotel Booking Engine & PMS: Cross-Site Request Forgery (CSRF) | 8.8 | |
| Medium | CVE-2022-1528 | VikBooking < 1.5.9 - Reflected Cross-Site Scripting | 6.1 | |
| Medium | CVE-2022-1407 | VikBooking Hotel Booking Engine & PMS < 1.5.7 - Stored Cross-Site Scripting via CSRF | 6.5 | |
| Medium | CVE-2022-1408 | VikBooking Hotel Booking Engine & PMS < 1.5.8 - Admin+ Stored Cross-Site Scripting | 4.8 | |
| Medium | CVE-2021-24519 | Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) | 4.8 | |
| Medium | CVE-2023-24396 | E4J s.r.l. VikBooking Hotel Booking Engine & PMS: Cross-site Scripting | 5.9 | |
| Medium | CVE-2024-13616 | VikBooking < 1.7.2 - Admin+ Stored XSS | 4.8 | |
| Medium | CVE-2024-2749 | VikBooking < 1.6.8 - Broken Access Control | 5.9 | |
| High | CVE-2023-25707 | E4J s.r.l. VikBooking Hotel Booking Engine & PMS: Cross-Site Request Forgery (CSRF) | 6.3 | |
| High | CVE-2023-32501 | E4J s.r.l. VikBooking Hotel Booking Engine & PMS: Cross-Site Request Forgery (CSRF) | 4.3 |
Products
| Vikbooking Hotel Booking Engine \& Pms | 7 | 0 |
| Hotel Booking Engine \& Pms | 3 | 0 |