Plugin icon

VikRentCar Car Rental Management System

vikrentcar

Vulnerabilities:

9

Last Updated:

December 3, 2025

Active Installs:

4000

Published
Title
Fixed in
CVSS
Published
2025-12-01
Title
VikRentCar Car Rental Management System < 1.4.5 - Authenticated (Author+) SQL Injection via 'month' Parameter
Fixed in
Fixed in 1.4.5
CVSS
7.5 (high)
Published
2025-07-03
Title
VikRentCar Car Rental Management System < 1.4.4 - Authenticated (Administrator+) Arbitrary File Upload
Fixed in
Fixed in 1.4.4
CVSS
7.2 (high)
Published
2025-03-07
Title
VikRentCar Car Rental Management System < 1.4.3 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 1.4.3
CVSS
8.8 (high)
Published
2024-08-01
Title
VikRentCar < 1.4.1 - Unauthenticated SQL Injection
Fixed in
Fixed in 1.4.1
CVSS
10 (critical)
Published
2024-06-20
Title
VikRentCar Car Rental Management System < 1.3.2 - Cross Site Request Forgery
Fixed in
Fixed in 1.3.2
CVSS
4.3 (medium)
Published
2024-04-22
Title
VikRentCar Car Rental Management System < 1.3.3 - Information Exposure
Fixed in
Fixed in 1.3.3
CVSS
5.3 (medium)
Published
2023-01-20
Title
VikRentCar < 1.3.1 - Admin+ Stored XSS
Fixed in
Fixed in 1.3.1
CVSS
5.9 (medium)
Published
2021-07-19
Title
Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.1.10
CVSS
4.8 (medium)
Published
2021-06-14
Title
Vik Rent Car < 1.1.7 - CSRF to Stored XSS
Fixed in
Fixed in 1.1.7
CVSS
7.1 (high)