WordPress plugin
eaSYNC Booking – Hotels, Restaurants & Car Rentals security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium7
- Low0
All eaSYNC Booking – Hotels, Restaurants & Car Rentals vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤1.3.30Update to 1.3.31 | CVE-2026-103304 | |
| Medium5.3 | Insecure Direct Object Reference to Sensitive Information Exposure ≤1.3.21Update to 1.3.22 | CVE-2025-4691 | |
| Medium4.3 | Missing Authorization ≤1.3.19Update to 1.3.21 | CVE-2025-32219 | |
| Medium6.1 | Cross-Site Request Forgery ≤1.3.14Update to 1.3.15 | CVE-2024-9450 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.3.11Update to 1.3.12 | CVE-2023-38384 | |
| Medium6.1 | Reflected Cross-Site Scripting via fs_request_get ≤1.9.2No patch available | CVE-2023-33999 | |
| High8.8 | Arbitrary File Upload ≤1.1.15Update to 1.1.16 | CVE-2022-1952 | |
| Medium6.3 | Missing Authorization Checks all versionsNo patch available | CVE-2022-4974 |
- Medium5.3Missing Authorization
≤1.3.30Update to 1.3.31
- Medium5.3Insecure Direct Object Reference to Sensitive Information Exposure
≤1.3.21Update to 1.3.22
- Medium4.3Missing Authorization
≤1.3.19Update to 1.3.21
- Medium6.1Cross-Site Request Forgery
≤1.3.14Update to 1.3.15
- Medium6.1Reflected Cross-Site Scripting
≤1.3.11Update to 1.3.12
- Medium6.1Reflected Cross-Site Scripting via fs_request_get
≤1.9.2No patch available
- High8.8Arbitrary File Upload
≤1.1.15Update to 1.1.16
- Medium6.3Missing Authorization Checks
all versionsNo patch available
eaSYNC Booking – Hotels, Restaurants & Car Rentals: common questions
Does eaSYNC Booking – Hotels, Restaurants & Car Rentals have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in eaSYNC Booking – Hotels, Restaurants & Car Rentals: 1 high, 7 medium. At least one is not fixed in the latest version.
How do I check which version of eaSYNC Booking – Hotels, Restaurants & Car Rentals I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent eaSYNC Booking – Hotels, Restaurants & Car Rentals vulnerability?
CVE-2026-103304, published Oct 13, 2026: eaSYNC <= 1.3.30 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any eaSYNC Booking – Hotels, Restaurants & Car Rentals vulnerability listed in CISA KEV?
No. None of the known eaSYNC Booking – Hotels, Restaurants & Car Rentals vulnerabilities is currently listed in the CISA KEV catalog.