OTA Sync Booking Engine Widget

OTA Sync Booking Engine Widget has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for OTA Sync Booking Engine Widget has a vendor fix available, so running the current release closes it.

All of these findings were reported by Ala Arfaoui. OTA Sync Booking Engine Widget is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.11.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all OTA Sync Booking Engine Widget vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-7647

OTA Sync Booking Engine Widget 1.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2024-08-20 00:00	OTA Sync Booking Engine Widget 1.2.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting OTA Sync Booking Engine Widget <= 1.2.7	`CVE-2024-7647`	6.1 Medium	Ala Arfaoui	Yes

Showing 1–1 of 1 reports

Latestv1.2.7

OTA Sync Booking Engine Widget

Author

OTASync OÜ

0.0(0)

0/100

Last Updated

2024-06-19 (2y ago)

Active Installs

70+

Downloads

4,002

Requires WP

5.2+

Requires PHP

7.2+

Tested up to

WP 6.2.11

Created

2022-06-17 (4y ago)

The exclusive features that our system offers and whose design requirements have been set by many agencies, property owners and the hotel managers worldwide were used to make the latest version of our booking engine the most complete ever one in the market. Offer your guests live availability and rates, upsell and cross-sell relevant products/services, mobile optimized, PCI compliant payment capturing, Multi-property overview. Our booking engine implementation is quick and easy using a widget which is placed on your website that gives your potential guests the opportunity to book one or more units instantly. The system is extremely flexible and easy to use. Different price lists per accommodation facility can increase the sales volume due to the sheer variety of offers: – Changing the price per unit / person – Standard or extra bed – Extra services / Up-Selling – City Tax & VAT automated – Special Offers & Packages – Promo Codes & Promotions …and many other features More details can be found at OTA Sync official website INSTALLATION THROUGH WORDPRESS CONTROL PANEL: Login to your WordPress account using the administrators username and password. Click the plugins icon on the left menu. Click the “Add New” button at the top of the Plugins menu. Search for “OTA Sync Booking Engine Widget” Click on “Install” When the “Plugin installed successfully” message appears, click the “Activate Plugin” link. Click on “Settings” in the left menu then on OTA Sync Booking Engine Widget. Enter your OTA Sync Property ID Choose from our selection of widgets and paste the shortcode into a post, page or sidebar. INSTALLTION VIA FTP: Download the plugin Upload the unzippd plugin folder to your WordPress plugin folder (wp-content/plugins) Go to WordPress and click the Plugins icon on the left menu. Activate the plugin Click on “Settings” in the left menu then on OTA Sync Booking Engine Widget. Enter your OTA Sync Property ID Choose from our selection of widgets and paste the shortcode into a post, page or sidebar.

View on WordPress.org