Arraytics Timetics vulnerabilities

• arraytics timetics WordPress Timetics plugin <= 1.0.65 - Broken Access Control vulnerability CVE-2026-116860 5.3 MediumOctober 30, 2026
• arraytics timetics WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability CVE-2026-97304 6.5 MediumOctober 5, 2026
• arraytics timetics WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerability CVE-2026-84215 6.5 MediumSeptember 3, 2026
• arraytics timetics Timetics <= 1.0.61 - Staff+ Cross-Staff Appointment Modification via IDOR CVE-2026-14326 3.8 LowSeptember 2, 2026
• arraytics timetics Timetics < 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment_method CVE-2026-14322 5.3 MediumJuly 22, 2026
• arraytics timetics WordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerability CVE-2026-57674 7.1 HighJuly 2, 2026
• arraytics timetics WordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerability CVE-2026-39432 8.2 HighMay 12, 2026
• arraytics timetics Timetics < 1.0.52 - Unauthenticated Payment/Booking Status Update CVE-2025-15473 4.3 MediumMarch 12, 2026
• arraytics timetics WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability CVE-2025-67915 8.8 HighJanuary 8, 2026
• arraytics timetics – appointment booking & scheduling Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification CVE-2025-5919 6.5 MediumJanuary 6, 2026
• arraytics timetics WordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerability CVE-2025-64268 7.5 HighDecember 18, 2025
• arraytics timetics WordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerability CVE-2025-30828 5.3 MediumMarch 27, 2025
• arraytics timetics – appointment booking & scheduling WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletion CVE-2024-11275 4.3 MediumDecember 13, 2024
• arraytics timetics WordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerability CVE-2024-37427 5.3 MediumNovember 1, 2024
• arraytics timetics, wp timetics +1 more WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability CVE-2024-43923 5.3 MediumNovember 1, 2024
• arraytics timetics, timetics – appointment booking & scheduling +1 more WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover CVE-2024-9263 9.8 CriticalOctober 17, 2024
• arraytics timetics, timetics – appointment booking & scheduling +1 more Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin <= 1.0.21 - Missing Authorization to Limited Privilege Escalation CVE-2024-1094 7.3 HighJune 14, 2024