Product

VikRentCar (N/a Through 1.4.8)

1 brief RSS

VikRentCar: Cross-Site Request Forgery (CVE-2026-112836)

A Cross-Site Request Forgery (CSRF) vulnerability in the VikRentCar WordPress plugin (versions 1.4.8 and earlier) allows unauthenticated attackers to perform unauthorized administrative actions.

VikRentCar +1 web-vulnerability wordpress csrf xss plugin-security

1t 3c updated 50m ago