High severity7.2NVD Advisory· Published May 16, 2022· Updated Jun 17, 2026
CVE-2022-1409
CVE-2022-1409
Description
The VikBooking Hotel Booking Engine & PMS WordPress plugin before 1.5.8 does not properly validate images, allowing high privilege users such as administrators to upload PHP files disguised as images and containing malicious PHP code
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/VikBooking Hotel Booking Engine & PMSdescription
- Range: <1.5.8
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/1330f8f7-4a59-4e9d-acae-21656a4101fenvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.