VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

VikRentCar Car Rental Management System security & vulnerabilities

vikrentcar— active installsLast vulnerability Oct 30, 2026

No known unpatched vulnerabilities in the latest version

All 21 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin
21Known vulnerabilities
  • Critical1
  • High11
  • Medium9
  • Low0
Vulnerabilities per year
2021: 2 vulnerabilities2212023: 1 vulnerability1232024: 3 vulnerabilities3242025: 3 vulnerabilities3252026: 12 vulnerabilities1226

All VikRentCar Car Rental Management System vulnerabilities

VikRentCar Car Rental Management System vulnerabilities
SeverityVulnerabilityCVEPublished
High7.2Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter
≤1.4.10Update to 1.4.11
CVE-2026-116548
High7.2Unauthenticated Stored Cross-Site Scripting via 'poplink' Parameter
≤1.4.9Update to 1.4.10
CVE-2026-115840
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.4.9Update to 1.4.10
CVE-2026-116405
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.4.10Update to 1.4.11
CVE-2026-28160
High8.8Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task
≤1.4.8Update to 1.4.9
CVE-2026-111120
Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute
≤1.4.10Update to 1.4.11
CVE-2026-116749
Medium6.5Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute
≤1.4.10Update to 1.4.11
CVE-2026-116750
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.4.8Update to 1.4.9
CVE-2026-112835
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.4.8Update to 1.4.9
CVE-2026-112838
Medium4.3Cross-Site Request Forgery
≤1.4.8Update to 1.4.9
CVE-2026-112836
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.4.7Update to 1.4.8
CVE-2026-39790
Medium5.3Unauthenticated Insecure Direct Object Reference
≤1.4.5Update to 1.4.6
CVE-2026-52699
High7.5Authenticated (Author+) SQL Injection via 'month' Parameter
≤1.4.4Update to 1.4.5
CVE-2025-13724
High7.2Authenticated (Administrator+) Arbitrary File Upload
≤1.4.3Update to 1.4.4
CVE-2025-5322
High8.8Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
≤1.4.2Update to 1.4.3
CVE-2024-11640
Critical10.0Unauthenticated SQL Injection
≤1.4.0Update to 1.4.1
CVE-2024-39653
Medium4.3Cross-Site Request Forgery
≤1.3.1Update to 1.3.2
CVE-2024-1845
Medium5.3Information Exposure
≤1.3.2Update to 1.3.3
CVE-2024-32780
Medium5.5Authenticated (Admin+) Cross Site Scripting
≤1.3.0Update to 1.3.1
CVE-2023-23998
Medium5.5Authenticated (Admin+) Stored Cross-Site Scripting
<1.1.10Update to 1.1.10
CVE-2021-24519
Medium6.1Cross-Site Request Forgery to Stored Cross-Site Scripting
≤1.1.6Update to 1.1.7
CVE-2021-24388

VikRentCar Car Rental Management System: common questions

Does VikRentCar Car Rental Management System have known vulnerabilities?

Yes. VulnCrest Radar lists 21 known vulnerabilities in VikRentCar Car Rental Management System: 1 critical, 11 high, 9 medium. None are known to affect version null.

How do I check which version of VikRentCar Car Rental Management System I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent VikRentCar Car Rental Management System vulnerability?

CVE-2026-116548, published Oct 30, 2026: VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter. Severity: High (CVSS 7.2).

Is any VikRentCar Car Rental Management System vulnerability listed in CISA KEV?

No. None of the known VikRentCar Car Rental Management System vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?