Radar sectionsPlugins & themes
Check my site

WordPress plugin

VikRentCar Car Rental Management System security & vulnerabilities

vikrentcar— active installsLast vulnerability Oct 30, 2026

No known unpatched vulnerabilities in the latest version

All 21 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

21Known vulnerabilities
  • Critical1
  • High11
  • Medium9
  • Low0
Vulnerabilities per year
2021: 2 vulnerabilities2212023: 1 vulnerability1232024: 3 vulnerabilities3242025: 3 vulnerabilities3252026: 12 vulnerabilities1226

All VikRentCar Car Rental Management System vulnerabilities

VikRentCar Car Rental Management System vulnerabilities
SeverityVulnerabilityCVEPublished
High7.2Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter
≤1.4.10Update to 1.4.11
CVE-2026-116548
High7.2Unauthenticated Stored Cross-Site Scripting via 'poplink' Parameter
≤1.4.9Update to 1.4.10
CVE-2026-115840
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.4.9Update to 1.4.10
CVE-2026-116405
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.4.10Update to 1.4.11
CVE-2026-28160
High8.8Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task
≤1.4.8Update to 1.4.9
CVE-2026-111120
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.4.8Update to 1.4.9
CVE-2026-112835
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.4.8Update to 1.4.9
CVE-2026-112838
High7.2Unauthenticated Stored Cross-Site Scripting
≤1.4.7Update to 1.4.8
CVE-2026-39790
High7.5Authenticated (Author+) SQL Injection via 'month' Parameter
≤1.4.4Update to 1.4.5
CVE-2025-13724
High7.2Authenticated (Administrator+) Arbitrary File Upload
≤1.4.3Update to 1.4.4
CVE-2025-5322
High8.8Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
≤1.4.2Update to 1.4.3
CVE-2024-11640
Critical10.0Unauthenticated SQL Injection
≤1.4.0Update to 1.4.1
CVE-2024-39653

VikRentCar Car Rental Management System: common questions

Does VikRentCar Car Rental Management System have known vulnerabilities?

Yes. VulnCrest Radar lists 21 known vulnerabilities in VikRentCar Car Rental Management System: 1 critical, 11 high, 9 medium. None are known to affect version null.

How do I check which version of VikRentCar Car Rental Management System I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent VikRentCar Car Rental Management System vulnerability?

CVE-2026-116548, published Oct 30, 2026: VikRentCar Car Rental Management System <= 1.4.10 - Unauthenticated Stored Cross-Site Scripting via 'optionals' Parameter. Severity: High (CVSS 7.2).

Is any VikRentCar Car Rental Management System vulnerability listed in CISA KEV?

No. None of the known VikRentCar Car Rental Management System vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?