Description
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of the VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's they shouldn't be allowed to.
Published: 2024-05-10
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00775}

 epss

{'score': 0.00429}

Mon, 05 May 2025 17:30:00 +0000

Type Values Removed Values Added
First Time appeared Vikwp
Vikwp vikbooking Hotel Booking Engine \& Pms
CPEs cpe:2.3:a:vikwp:vikbooking_hotel_booking_engine_\&_pms:*:*:*:*:*:wordpress:*:*
Vendors & Products Vikwp
Vikwp vikbooking Hotel Booking Engine \& Pms

Fri, 14 Mar 2025 01:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-285
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Vikwp Vikbooking Hotel Booking Engine \& Pms
cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published:

Updated: 2025-03-14T00:35:04.454Z

Reserved: 2024-03-13T21:15:48.984Z

Link: CVE-2024-2441

cve-icon Vulnrichment

Updated: 2024-08-01T19:11:53.563Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-14T15:19:20.063

Modified: 2025-05-05T17:12:21.360

Link: CVE-2024-2441

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses