Input validation vulnerability in VikBooking Hotel Booking Engine & PMS 1.6.1

The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to malicious activity if it is using an outdated version. This is because of missing or incorrect security measures in the admin/controller.php file. An unauthenticated attacker could use this to tamper with the number of available rooms, payment options, and the default order of various fields if they can deceive a site admin into clicking on a malicious link. To protect from this, make sure your VikBooking plugin is up-to-date.