CVE-2022-27863

Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to get the booking data by guessing / brute-forcing easy predictable booking IDs via search POST requests.

• CWE-200

• https://patchstack.com/database/vulnerability/vikbooking/wordpress-vikbooking-hotel-booking-engine-pms-plugin-1-5-3-sensitive-data-exposure-vulnerabilityRelease Notes, Third Party Advisory
• https://wordpress.org/plugins/vikbooking/#developersVendor Advisory
• https://patchstack.com/database/vulnerability/vikbooking/wordpress-vikbooking-hotel-booking-engine-pms-plugin-1-5-3-sensitive-data-exposure-vulnerabilityRelease Notes, Third Party Advisory
• https://wordpress.org/plugins/vikbooking/#developersVendor Advisory

Published

Apr 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27856Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerabil…5.4
• CVE-2022-27858CSV Injection vulnerability in Activity Log Team Activity Lo…9.8
• CVE-2022-27859Multiple Authenticated (contributor or higher user role) Sto…5.4
• CVE-2022-27860Cross-Site Request Forgery (CSRF) leading to Cross-Site Scri…6.1
• CVE-2022-27861Unauth. Open Redirect vulnerability in Arscode Ninja Popups …6.1
• CVE-2022-27862Arbitrary File Upload leading to RCE in E4J s.r.l. VikBookin…9.8
• CVE-2022-27864A Double Free vulnerability allows remote attackers to execu…8.8
• CVE-2022-27865A maliciously crafted TGA or PCX file may be used to write b…7.8
• CVE-2022-27866A maliciously crafted TIFF file when consumed through Design…7.8
• CVE-2022-27867A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021…7.8
• CVE-2022-27868A maliciously crafted CAT file in Autodesk AutoCAD 2023 can …7.8
• CVE-2022-27869A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can…7.8