Skip to content
Threat Feed
Subscribe

Product

VikRentCar (<= 1.4.8)

1 brief RSS
high advisory

VikRentCar: Cross-Site Request Forgery (CVE-2026-112836)

A Cross-Site Request Forgery (CSRF) vulnerability in the VikRentCar WordPress plugin (versions 1.4.8 and earlier) allows unauthenticated attackers to perform unauthorized administrative actions.

VikRentCar web-vulnerability wordpress csrf xss plugin-security
2c updated