Easy Booking – WooCommerce Booking & Reservation Plugin Security & Risk Analysis

The "woocommerce-easy-booking-system" plugin version 3.4.9 presents a generally good security posture with a high percentage of prepared SQL statements and properly escaped output. The absence of known CVEs and a clean vulnerability history are positive indicators. However, the static analysis reveals some areas for concern, notably one unprotected REST API route, which represents a direct entry point that lacks permission checks. Additionally, two flows with unsanitized paths were identified in the taint analysis, both flagged as high severity. While no critical vulnerabilities were found, these high-severity taint flows and the unprotected REST API route warrant attention as they could potentially be exploited if specific conditions are met.