Most severe vulnerabilities for vendor "syntactics"

Where

Sort:

Software

syntactics easync

syntactics easync (wordpress plugin)

syntactics easync-booking

syntactics free booking plugin for hotels\, restaurant and car rental wordpress

syntacticsinc easync wordpress

Syntactics Free Booking Plugin For Hotels\, Restaurant And Car Rental WordpresseaSYNC < 1.1.16 - Unauthenticated Arbitrary File Upload

Risk 86

Severity

9.8

Malicious File Upload, Input Validation

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessible to unauthenticated users is affected by this issue. An allowlist of valid file extensions is defined but is not used during the validation steps.

First published (updated )

CVE-2022-1952

Syntactics eaSYNCWordPress eaSYNC plugin <= 1.3.19 - Broken Access Control vulnerability

Risk 25

Severity

5.4

EPSS

0.04%

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Missing Authorization vulnerability in Syntactics, Inc. eaSYNC allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects eaSYNC: from n/a through 1.3.19.

1 / 2

Source: NVD

First published (updated )

CVE-2025-32219

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending