What is CVE-2024-9450?

CVE-2024-9450 is a medium-severity vulnerability in Syntacticsinc Easync, classified under Cross-Site Request Forgery (CSRF). CVSS score: 6.5/10. Published 2025-05-15.

How severe is CVE-2024-9450?

Medium severity. CVSS v3 base score is 6.5 out of 10.

CSRF in Syntacticsinc Easync

CVE-2024-9450

The Free Booking Plugin for Hotels, Restaurants and Car Rentals WordPress plugin before 1.3.15 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in subscriber change them via a CSRF attack

Vulnerability class: CSRF (Cross-Site Request Forgery)

Published 2025-05-15 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.

EPSS exploit prediction

EPSS: 0.002 (7.3th percentile), scored 2026-09-30.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 7th percentile — 7.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000

Affected products

Syntacticsinc Easync
Free Booking Plugin For Hotels, Restaurants And Car Rentals — versions 0

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

wpscan.com/vulnerability/f4b9568a-af74-40df-89c1-550e8515ca0a/ (Exploit, technical-description, Third Party Advisory, exploit, vdb-entry)

Frequently asked questions

What is CVE-2024-9450?: CVE-2024-9450 is a medium-severity vulnerability in Syntacticsinc Easync, classified under Cross-Site Request Forgery (CSRF). CVSS score: 6.5/10. Published 2025-05-15.
How severe is CVE-2024-9450?: Medium severity. CVSS v3 base score is 6.5 out of 10.