Advisories · Technology

e4jvikwp VikAppointments Services Booking Calendar.

Every CVE that names e4jvikwp VikAppointments Services Booking Calendar among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-87115 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

VikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter
- e4jvikwp VikAppointments Services Booking Calendar
- Path traversal
Not analysed yet 3 Oct 2026
CVE-2026-84768 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress VikAppointments Services Booking Calendar plugin <= 1.2.20 - SQL Injection vulnerability
- e4jvikwp VikAppointments Services Booking Calendar
- SQL injection
Not analysed yet 3 Sept 2026
CVE-2026-15918 CVE record

CVSS 7.5 High

VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL Injection
- e4jvikwp VikAppointments Services Booking Calendar
- SQL injection
Not analysed yet 5 Aug 2026
CVE-2025-22719 CVE record

CVSS 7.1 High

WordPress VikAppointments Services Booking Calendar plugin <= 1.2.16 - CSRF to Stored XSS vulnerability
- e4jvikwp VikAppointments Services Booking Calendar
- Cross-site scripting (XSS)
Not analysed yet 21 Jan 2025