Veille CVE

Recherche « Unknown eaSYNC Booking »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown eaSYNC Booking » ✕
  1. CVE-2026-103304 5.3 Moyenne

    Unknown eaSYNC Booking

    The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the emails the site sends.