CVE-2022-27863: Vikwp Vikbooking Hotel Booking Engine & Property Management System Plugin

Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Sensitive Information Exposure in E4J s.r.l. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.3 on WordPress allows attackers to get the booking data by guessing / brute-forcing easy predictable booking IDs via search POST requests.

Affected products

• Vikwp Vikbooking Hotel Booking Engine & Property Management System Plugin: up to and including 1.5.3

Published 2022-04-19. Last modified 2026-06-17.