Sensitive Data Exposure in VikBooking Hotel Booking Engine by VikWP
CVE-2025-49918

5.9MEDIUM

Key Information:

Vendor

WordPress
Status
Vikbooking Hotel Booking Engine & Pms
Vendor
CVE Published:
18 December 2025

What is CVE-2025-49918?

A vulnerability has been identified in the VikBooking Hotel Booking Engine & PMS by VikWP, which allows the retrieval of embedded sensitive data. This issue impacts all versions up to 1.8.2, potentially exposing confidential information to unauthorized access. Users are advised to take immediate action to secure their installations and mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

VikBooking Hotel Booking Engine & PMS <= n/a

References

https://patchstack.com/database/Wordpress/Plugin/vikbooki...
vdb-entry

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

daroo | Patchstack Bug Bounty Program
JSON
.