Skip to content
Threat Feed
Subscribe

Product

VikRentCar Car Rental Management System (<= 1.4.10)

1 brief RSS
high advisory

VikRentCar Car Rental Management System: Cross-Site Request Forgery RCE (CVE-2026-111120)

The VikRentCar plugin for WordPress (<= 1.4.8) contains a CSRF vulnerability in the condtext_update_tmpl function that permits unauthenticated attackers to achieve remote code execution by injecting PHP code into template files.

VikRentCar Car Rental Management System +1 web-application cms vulnerability rce web-vulnerability xss wordpress plugin
4t 2c updated