CVE-2024-2441

PoC —

CVSS 3.1

8.1 high

EPSS

<1%p47

Published

May 14, 2024 (May 14, 2024)

Modified

Jun 17, 2026

Description

The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8 allows direct access to menus, allowing an authenticated user with subscriber privileges or above, to bypass authorization and access settings of the VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.6.8's they shouldn't be allowed to.

Vendors: vikwp
Products: vikbooking hotel booking engine \& pms
Ecosystems: WordPress
Weakness: CWE-285
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.