Arraytics vulnerabilities

Products

• Eventin 29
• Timetics 15
• Booktics 12
• Eventin – Event Calendar, Event Registration, Tickets & Booking (ai Powered) 12
• Wp Event Solution 12
• Wpcafe 10
• Eventin – Event Calendar, Tickets, Registration, Booking & Woocommerce 6
• Wpcafe – Restaurant Menu, Online Food Ordering & Table Booking System 6
• Timetics – Appointment Booking & Scheduling 4
• Booktics – Booking Calendar For Appointments And Service Businesses 2

Newest

• arraytics booktics WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability CVE-2026-104674 4.3 MediumOctober 30, 2026
• arraytics booktics WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability CVE-2026-62122 5.3 MediumOctober 30, 2026
• arraytics timetics WordPress Timetics plugin <= 1.0.65 - Broken Access Control vulnerability CVE-2026-116860 5.3 MediumOctober 30, 2026
• arraytics wp event solution WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability CVE-2026-112844 7.1 HighOctober 24, 2026
• arraytics booktics WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability CVE-2026-112829 5.3 MediumOctober 20, 2026
• arraytics booktics WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability CVE-2026-109895 7.1 HighOctober 18, 2026
• arraytics booktics WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability CVE-2026-109894 9.3 CriticalOctober 18, 2026
• arraytics wp event solution WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability CVE-2026-110380 5.3 MediumOctober 16, 2026
• arraytics wp event solution WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability CVE-2026-109898 5.3 MediumOctober 13, 2026
• arraytics booktics WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability CVE-2026-107418 5.4 MediumOctober 12, 2026
• arraytics booktics WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability CVE-2026-108477 5.3 MediumOctober 12, 2026
• arraytics booktics WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability CVE-2026-104390 4.3 MediumOctober 7, 2026
• arraytics wpcafe WPCafe < 3.0.21 - Unauthenticated Product Data Disclosure via REST API CVE-2026-86816 5.3 MediumOctober 7, 2026
• arraytics wp event solution WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability CVE-2026-97300 6.5 MediumOctober 6, 2026
• arraytics timetics WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability CVE-2026-97304 6.5 MediumOctober 5, 2026
• arraytics wp event solution WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability CVE-2026-103684 5.3 MediumOctober 5, 2026
• arraytics wp event solution WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability CVE-2026-105073 5.3 MediumOctober 5, 2026
• arraytics wpcafe – restaurant menu, online food ordering & table booking system WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete CVE-2026-11601 5.3 MediumOctober 3, 2026
• arraytics wpcafe – restaurant menu, online food ordering & table booking system WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting CVE-2026-75028 7.5 HighOctober 3, 2026
• arraytics eventin Eventin < 4.1.24 - Unauthenticated Payment Bypass via Stripe and PayPal Cross-Order Transaction Replay CVE-2026-84906 5.3 MediumSeptember 16, 2026
• arraytics eventin Eventin < 4.1.24 - Unauthenticated Order and Attendee Status Reset via Payment REST Endpoint CVE-2026-84907 3.7 LowSeptember 16, 2026
• arraytics eventin Eventin < 4.1.24 - Contributor+ User Creation via Speaker Creation CVE-2026-84905 2.7 LowSeptember 16, 2026
• arraytics eventin Eventin < 4.1.24 - Unauthenticated Ticket Price Rewrite via order_token CVE-2026-77702 5.3 MediumSeptember 16, 2026
• arraytics eventin – event calendar, tickets, registration, booking & woocommerce Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter CVE-2026-75983 7.5 HighSeptember 15, 2026
• arraytics eventin – event calendar, tickets, registration, booking & woocommerce Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter CVE-2026-15402 6.4 MediumSeptember 15, 2026
• arraytics booktics WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability CVE-2026-62135 5.3 MediumSeptember 11, 2026
• arraytics wpcafe WPCafe 3.0.10 - 3.0.17 - Unauthenticated Order Disclosure and Modification via food-orders REST API CVE-2026-86812 6.5 MediumSeptember 11, 2026
• arraytics booktics – appointment booking calendar for service businesses Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization CVE-2026-11446 5.3 MediumSeptember 11, 2026
• arraytics eventin – event calendar, tickets, registration, booking & woocommerce Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint CVE-2026-11821 5.4 MediumSeptember 9, 2026
• arraytics eventin – event calendar, tickets, registration, booking & woocommerce Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter CVE-2026-15667 7.5 HighSeptember 9, 2026
• arraytics eventin – event calendar, tickets, registration, booking & woocommerce Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter CVE-2026-15406 7.5 HighSeptember 9, 2026
• arraytics eventin – event calendar, tickets, registration, booking & woocommerce Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter CVE-2026-12956 5.3 MediumSeptember 9, 2026
• arraytics eventin Eventin < 4.1.22 - Contributor+ Site Homepage Hijack and Event Taxonomy Manipulation via Missing Authorization CVE-2026-84901 4.9 MediumSeptember 5, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ LFI via Event Layout Meta CVE-2026-84898 6.6 MediumSeptember 5, 2026
• arraytics timetics WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerability CVE-2026-84215 6.5 MediumSeptember 3, 2026
• arraytics timetics Timetics <= 1.0.61 - Staff+ Cross-Staff Appointment Modification via IDOR CVE-2026-14326 3.8 LowSeptember 2, 2026
• arraytics wp event solution WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability CVE-2026-82223 6.5 MediumSeptember 2, 2026
• arraytics eventin Eventin < 4.1.19 - Unauthenticated Order Completion Without Payment via order_token CVE-2026-77694 5.3 MediumAugust 26, 2026
• arraytics wpcafe WPCafe < 3.0.18 - Unauthenticated Reservation Approval Bypass via Missing Authorization CVE-2026-14550 5.3 MediumAugust 26, 2026
• arraytics eventin Eventin < 4.1.22 - Unauthenticated Unpublished Content Disclosure CVE-2026-13172 5.3 MediumAugust 26, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ Server-Side Request Forgery CVE-2026-13176 2.7 LowAugust 21, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ Schedule Deletion and Modification via IDOR CVE-2026-13175 6.5 MediumAugust 19, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR CVE-2026-13174 7.2 HighAugust 19, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ User Role and Meta Modification via Speaker Creation CVE-2026-13173 2.7 LowAugust 19, 2026
• arraytics eventin Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR CVE-2026-13169 8.1 HighAugust 19, 2026
• arraytics booktics WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability CVE-2026-28002 8.5 HighAugust 13, 2026
• arraytics wp event solution WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability CVE-2026-28174 6.5 MediumAugust 13, 2026
• arraytics wp event solution WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability CVE-2026-28173 7.1 HighAugust 13, 2026
• arraytics eventin Eventin < 4.1.20 - Contributor+ Order Information Disclosure via IDOR CVE-2026-13177 4.3 MediumAugust 12, 2026
• arraytics eventin Eventin < 4.1.20 - Unauthenticated Account Creation via Waiting List Endpoint CVE-2026-13171 8.2 HighAugust 12, 2026
• Show olderLoading…