Unknown Easync Booking vulnerabilities

1 vulnerability

Known vulnerabilities in Unknown Easync Booking, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2026-103304unknowneasync booking
EPSS score
0.22%
The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the emails the site sends.