RentSyst – CRM solution for fleet management
RentSyst – CRM solution for fleet management has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, Missing Authorization.
2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.
3 independent researchers contributed these findings, one record each. RentSyst – CRM solution for fleet management is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.0.
CVE-2026-84835RentSyst – CRM solution for fleet management <= 2.1.3 - Missing Authorization
Read the full analysisVulnerability Records

RentSyst – CRM solution for fleet management
Author
dimafreund
For customers of our CRM system, a website is one of the most important sources of orders and potential customers. Our plugin allows you to easily integrate the RentSyst CRM system into your website. You can synchronize your fleet and groups of vehicles that you have added to the RentSyst and interact comfortably with it. The integration of our plugin is very simple: * Download and activate the plugin * Connect to RentSyst (enter login and password) * Synchronize & Use With the free RentSyst plugin, you can easily: * Manage your vehicle base * Set up the necessary fields for rental forms * Change design page for the vehicle and the booking form * Synchronize orders that come from the site in the RentSyst CRM system By installing our plugin, you get a fully responsive design of booking forms for all platforms. Functions: 1. Adding a vehicle catalog 2. Create a booking widget and separate page for booking 3. Add and configure a filters for your fleet 4. Create and change the design / layout of buttons for the form 5. Customize the color scheme according to your brand palette The information entered in the form on the website is automatically placed in the RentSyst system with zero delay. Now you do not miss your orders and your customers – RentSyst will keep main processes under control. Our plugin is absolutely free. No hidden fees and no additional purchases. All you need is a WordPress website and RentSyst account. Booking widget JavaScript events: – rentsyst:search – rentsyst:book – rentsyst:order_confirm Please pay attention, that our plugin is designed for standard WP redactor and cannot be fully compatible with Elementor, DIVI Builder, or similar WP builders. Please do not cache next url: /wp-json/rentsyst/v1/access-token How to use Plugin? RentSyst Booking Engine – Editor 2.0 Video Guide
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C