CVE-2026-103304 | eaSYNC Booking Plugin up to 1.3.30 on WordPress AJAX Actions authorization

October 15, 2026 Yanac

A vulnerability classified as critical was found in eaSYNC Booking Plugin up to 1.3.30 on WordPress. This issue affects some unknown processing of the component AJAX Actions. Executing a manipulation can lead to missing authorization.

This vulnerability is registered as CVE-2026-103304. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More