Skip to content
OpenAdvisories

Vendor

Syntactics

3 known vulnerabilities.

Products

eaSYNC 2 eaSYNC Booking – Hotels, Restaurants & Car Rentals 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-4691

    Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking <= 1.3.21 - Insecure Direct Object Reference to Sensitive Information Exposure

    The Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.21 via the 'view_request_details' due to missing validation on a …

    Syntactics eaSYNC Booking – Hotels, Restaurants & Car Rentals Web / CMS
  • Medium 5.4
    CVE-2025-32219

    WordPress eaSYNC plugin <= 1.3.19 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Syntactics, Inc. eaSYNC easync-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eaSYNC: from n/a through <= 1.3.19.

    Syntactics eaSYNC