← Vulnerability feed

Vulnerability record · CVE-2025-4691 · published 31 May 2025

CVE-2025-4691: Syntacticsinc easync insecure direct object reference vulnerability

Syntacticsinc · Easync

The Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.21 via the 'view_request_details' due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view the details of any booking request. The vulnerability was partially patched in versions 1.3.18 and 1.3.21.

5.3 CVSS 3.1 Medium EPSS 0.33% · top 76.3% CWE-639 · Insecure direct object reference
5.3CVSS 3.1 base score
0.33%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
5References
17 Jun 2026Last modified by NVD

Description

The Free Booking Plugin for Hotels, Restaurants and Car Rentals – eaSYNC Booking plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.21 via the 'view_request_details' due to missing validation on a user controlled key. This makes it possible for unauthenticated attackers to view the details of any booking request. The vulnerability was partially patched in versions 1.3.18 and 1.3.21.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://plugins.trac.wordpress.org/browser/easync-booking/tags/1.3.17/easync.php#L4859 Product
https://plugins.trac.wordpress.org/changeset/3243634/ Patch
https://plugins.trac.wordpress.org/changeset/3293607/ Patch
https://plugins.trac.wordpress.org/changeset/3300408/ Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/3c9953b3-dd09-4c80-be11-4daf3bbac720?source=cve Third Party Advisory

Track CVE-2025-4691 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-1952Syntacticsinc easync unrestricted file upload vulnerabilityThe Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads t…EPSS 25%6.5CVE-2024-9450Syntacticsinc easync cross-site request forgery vulnerabilityThe Free Booking Plugin for Hotels, Restaurants and Car Rentals WordPress plugin before 1.3.15 does not have CSRF check in place when updating its se…EPSS 0.19%6.1CVE-2023-38384Syntacticsinc easync cross-site scripting vulnerabilityUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Syntactics, Inc. EaSYNC plugin <= 1.3.7 versions.EPSS 0.38%8.4CVE-2026-55255Langflow IDOR in responses endpoint allows cross-user flow executionLangflow before 1.9.1 has an insecure direct object reference in the /api/v1/responses endpoint. An authenticated attacker can supply another user's …KEVEPSS 0.89%analysed

Source: NIST National Vulnerability Database (record CVE-2025-4691), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.