Skip to content

Exploited: 178

LatestCVE-2026-121599 — TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow

7.1

CVE-2026-28160Verify fix

WordPress VikRentCar plugin <= 1.4.10 - Cross Site Scripting (XSS) vulnerability

e4jvikwp VikRentCar2026-10-30 18:30 UTC1 min readRead in

Summary

Unauthenticated Cross Site Scripting (XSS) in VikRentCar <= 1.4.10 versions.

Remediation

Inventory every e4jvikwp VikRentCar deployment, including staging.
No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

Referencehttps://patchstack.com/database/wordpress/plugin/vikrentcar/vulnerability/wordpress-vikrentcar-plugin-1-4-10-cross-site-scripting-xss-vulnerability?_s_id=cve

CVSS vector

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Changed
Confidentiality: Low
Integrity: Low
Availability: Low

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

Affected versions

Version	Fixed in
– 1.4.10	None yet
0 – 1.4.10	None yet

Weakness

CWE-79

Exploit probability (EPSS)

0.2%

Timeline

2026-10-30Publicly disclosed

Sources

CVE · NVD