Vikappointments Services Booking Calendar
Approved changes feed: RSS · Atom
cpe:2.3:a:e4jvikwp:vikappointments_services_booking_calendar:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | E4Jvikwp (194e4a75-0131-5050-9564-5de1502edb2c) |
|---|---|
| Product | Vikappointments Services Booking Calendar (0cdf749e-ce55-559d-b7e7-9da41950d046) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-15918 |
vulnerable | 2026-09-16 04:33:06.686506 |
VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection
HIGH (7.5)
VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the public reviews list is sorted is taken from the incoming request and used to build a database query without proper validation or sanitization. Because this value is placed directly into the query, an attacker who is not logged in can inject arbitrary SQL through a normal booking page and read data from the site's database — including sensitive information such as WordPress user credentials. No authentication or special privileges are required
Published: 2026-08-05T04:25:25.310Z
Updated: 2026-08-05T14:27:34.869Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-22719 |
vulnerable | 2026-06-08 07:10:54.672791 |
WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikAppointments Services Booking Calendar vikappointments allows Stored XSS.This issue affects VikAppointments Services Booking Calendar: from n/a through <= 1.2.16.
Published: 2025-01-21T13:57:35.290Z
Updated: 2026-04-28T16:11:05.928Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.