What’s Vulnerable › Products

syntactics eaSYNC Booking – Hotels, Restaurants & Car Rentals vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your syntactics eaSYNC Booking – Hotels, Restaurants & Car Rentals version is affected

Latest syntactics eaSYNC Booking – Hotels, Restaurants & Car Rentals vulnerabilities

• CVE-2025-4691 — Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking <= 1.3.21 - Insecure Direct Object Reference to Sensitive Information Exposure (CVSS 5.3)
• CVE-2024-9450 — Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking < 1.3.15 - Subscriber+ PayPal Settings Update (CVSS 6.5)
• CVE-2025-32219 — WordPress eaSYNC plugin <= 1.3.19 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2023-38384 — WordPress eaSYNC Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
• CVE-2022-1952 — eaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload (CVSS 9.8)