CVE-2026-111120 | e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.8 on WordPress Nonce Validation email_tmpl.php condtext_update_tmpl cross-site request forgery

October 28, 2026 Yanac

A vulnerability labeled as problematic has been found in e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.8 on WordPress. This vulnerability affects the function condtext_update_tmpl of the file site/helpers/email_tmpl.php of the component Nonce Validation. Executing a manipulation can lead to cross-site request forgery.

This vulnerability appears as CVE-2026-111120. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More