VikRentCar Car Rental Management System

VikRentCar Car Rental Management System has 17 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 17 are fixed as of October 2026. Their average CVSS score is 6.7, and the most serious one scores 10.0 out of 10. Severity breakdown: 1 critical and 7 high. 2026 was the busiest year with 8 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (41%). Other recurring categories include Cross-Site Request Forgery (CSRF), SQL Injection.

Every one of the 17 issues recorded for VikRentCar Car Rental Management System has a vendor fix available, so running the current release closes all known holes.

14 independent researchers contributed these findings, most of them (3) reported by Wordfence PRISM. VikRentCar Car Rental Management System is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

01234567891029.11.2019Today14.06.20216.1Vik Rent Car <= 1.1.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVSS 6.1 · 14.06.202119.07.20215.5VikRentCar Car Rental Management System < 1.1.10 - Authenticated (Admin+) Stored Cross-Site Scripting CVSS 5.5 · 19.07.202120.01.20235.5VikRentCar Car Rental Management System <= 1.3.0 - Authenticated (Admin+) Cross Site Scripting CVSS 5.5 · 20.01.202322.04.20245.3VikRentCar Car Rental Management System <= 1.3.2 - Information Exposure CVSS 5.3 · 22.04.202420.07.20244.3VikRentCar Car Rental Management System <= 1.3.1 - Cross-Site Request Forgery CVSS 4.3 · 20.07.202401.08.202410.0VikRentCar <= 1.4.0 - Unauthenticated SQL Injection CVSS 10.0 · 01.08.202407.03.20258.8VikRentCar Car Rental Management System <= 1.4.2 - Cross-Site Request Forgery to Authenticated (Subscriber+) Arbitrary File Upload CVSS 8.8 · 07.03.202503.07.20257.2VikRentCar Car Rental Management System <= 1.4.3 - Authenticated (Administrator+) Arbitrary File Upload CVSS 7.2 · 03.07.202501.12.20257.5VikRentCar Car Rental Management System <= 1.4.4 - Authenticated (Author+) SQL Injection via 'month' Parameter CVSS 7.5 · 01.12.202510.06.20265.3VikRentCar Car Rental Management System <= 1.4.5 - Unauthenticated Insecure Direct Object Reference CVSS 5.3 · 10.06.202605.10.20267.2VikRentCar Car Rental Management System <= 1.4.7 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 05.10.202620.10.20264.3VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery CVSS 4.3 · 20.10.202621.10.20267.2VikRentCar Car Rental Management System <= 1.4.8 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 21.10.20267.2VikRentCar Car Rental Management System <= 1.4.8 - Unauthenticated Stored Cross-Site Scripting CVSS 7.2 · 21.10.202627.10.20266.5VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) SQL Injection via 'catid' Block Attribute CVSS 6.5 · 27.10.20266.4VikRentCar Car Rental Management System <= 1.4.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'className' Block Attribute CVSS 6.4 · 27.10.20268.8VikRentCar Car Rental Management System <= 1.4.8 - Cross-Site Request Forgery to Remote Code Execution via 'condtext_update_tmpl' AJAX Task CVSS 8.8 · 27.10.2026

Strategic Overview

Avg CVSSMedium
6.7/ 10
Patch Coverage100%
Open

0

Fixed

17

Get automatic notifications for all VikRentCar Car Rental Management System vulnerabilities before they are exploited.

Highest severity on recordCVSS 10.0CVE-2024-39653

VikRentCar <= 1.4.0 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

17 records
2026-10-27 18:29CVE-2026-111120
8.8
High
Wordfence PRISMYes
2026-10-27 18:05CVE-2026-116749
6.4
Medium
Wordfence PRISMYes
2026-10-27 18:04CVE-2026-116750
6.5
Medium
Wordfence PRISMYes
2026-10-21 00:00CVE-2026-112838
7.2
High
leon figueiraYes
2026-10-21 00:00CVE-2026-112835
7.2
High
AyukiabYes
2026-10-20 15:09CVE-2026-112836
4.3
Medium
AyukiabYes
2026-10-05 16:36CVE-2026-39790
7.2
High
dutafiYes
2026-06-10 00:00CVE-2026-52699
5.3
Medium
dodoh4tYes
2025-12-01 19:42CVE-2025-13724
7.5
High
zhenhua fanYes
2025-07-03 09:03CVE-2025-5322
7.2
High
Jonas Benjamin FriedliYes
Showing 1–10 of 17 reports
VikRentCar Car Rental Management System banner
Latestv1.4.11

VikRentCar Car Rental Management System

e4jvikwp

Author

e4jvikwp

4.8(30)
96/100
Last Updated
2026-10-27 (16h ago)
Active Installs
4,000+
Downloads
90,921
Requires WP
4.7+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2019-11-29 (7y ago)

Vik Rent Car for WordPress The popular car rental management system is now available also for WordPress as a Native Plugin! If you are looking for a reliable reservation system for renting cars, scooter, motorbikes, boats or any other vehicles, then you have found the right plugin. In fact, Vik Rent Car is a famous piece of software used by thousands of car rental companies worldwide every day. Vik Rent Car was born in 2008 for a different web-software (CMS) than WordPress, and that’s how it became popular. The same powerful framework is now at the service of all webmasters, designers and web-agencies that work with WordPress. It’s definitely the car rental plugin that you, or your client, were looking for. This is the free version of the plugin, but you can upgrade to the Pro version at any time from your wp-admin section. Experience the power of a robust vehicles rental management system! Works with any car rental theme for WordPress, or any other kind of theme. Visit VikWP.com for more details. Some of the unique features The most flexible pricing system that follows the OpenTravel Standards for any pricing model Custom Rate Plans (Refundable, Flexible, Non Refundable rates, Insurances, Damage Waiver etc.) Neat vehicles management functions with distinctive features for the sub-units Availability Overview with monthly calendars Pricing Calendar Overview Rental orders management functions for pros Feature-rich back-end section Front-end customizable booking process 8 different Views for the front-end (7 types of Shortcode for your pages) Multi-language support with built-in translation functions Some of Pro version features Seasonal Pricing and Rates Calendar with 1-click modification Restrictions to define the min/max number of days of rent, weekdays allowed for pick up and drop off Custom fields to request specific billing information to the customers Options and Extra Services to be added to the rental order Fees for out of hours times and for certain combination of locations Customers management window Graphs and Statistics for the various rental orders Custom Payment Methods with real bank gateways to accept credit cards Coupon codes to apply discounts to the orders Interested in, curious about the Pro version? You should take a look with your own eyes at the demo website to see what you can do with Vik Rent Car. Do not stop at the front-end though, make sure to visit the wp-admin section too. Front-end Demo Website Admin Demo Website

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C