Easync Booking

eaSYNC Booking plugin Insecure Direct Object Reference Vulnerability (CVE-2025-4691) — Medium Severity

The eaSYNC Booking plugin, a widely used tool for managing reservations in hotels, restaurants, and car rental services on WordPress platforms, has been found to contain a significant security vulnerability. This flaw, categorized as an Insecure Direct Object Reference (IDOR),…

Alex Joseph
January 23, 2026

Free Booking Plugin for WordPress CSRF Vulnerability (CVE-2024-9450) — Medium Severity

Understanding the Free Booking Plugin Vulnerability A security flaw has been found in the Free Booking Plugin for Hotels, Restaurants and Car Rentals, also known as eaSYNC Booking, a popular WordPress plugin. This vulnerability, identified as CVE-2024-9450, could allow attackers…

Alex Joseph
January 23, 2026