Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:vikwp:vikrentcar:*:*:*:*:*:wordpress:*:*

1 brief RSS
high advisory

VikRentCar Car Rental Management System: Cross-Site Request Forgery RCE (CVE-2026-111120)

The VikRentCar plugin for WordPress (<= 1.4.8) contains a CSRF vulnerability in the condtext_update_tmpl function that permits unauthenticated attackers to achieve remote code execution by injecting PHP code into template files.

VikRentCar Car Rental Management System web-application cms vulnerability rce
2t 1c