CVE-2025-5322 | e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.3 on WordPress do_updatecar unrestricted upload

A vulnerability, which was classified as critical, was found in e4jvikwp VikRentCar Car Rental Management System Plugin up to 1.4.3 on WordPress. This affects the function do_updatecar. The manipulation leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2025-5322. It is possible to initiate the attack remotely. There is no exploit available.