Input validation vulnerability in VikBooking Hotel Booking Engine & PMS 1.5.12

The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery. This affects versions of the plugin up to and including 1.5.12. The vulnerability exists due to a lack of protection which stops unauthorised users from accessing the “savetranslationstay” function. A malicious attacker could exploit this vulnerability by tricking an administrator of the website into clicking on a link, resulting in the function being invoked.