CVE WATCH / VULNERABILITY DETAIL
CVE-2026-103304
MEDIUMCVSS 5.3NVD feed
Published 15 October 2026 · tracked since 16 October 2026
Description
The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the emails
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110924 MEDIUM 4.8
- CVE-2026-110927 MEDIUM 4.3
- CVE-2026-106160 MEDIUM 5.4
- CVE-2026-99999 CRITICAL 9.3
- CVE-2026-110723 HIGH 7.5
- CVE-2026-109686 CRITICAL 9.8
- CVE-2026-107416 HIGH 7.5
- CVE-2026-8145 MEDIUM 5.4
- CVE-2026-110726 MEDIUM 6.5
- CVE-2026-79824 HIGH 8