Skip to contentArraytics vulnerabilities
Newest
- arraytics eventinEventin < 4.1.20 - Contributor+ Customer PII Disclosure via REST APICVE-2026-131686.5 Medium
- arraytics eventinEventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template SettingCVE-2026-131707.2 High
- arraytics wp event solutionWordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerabilityCVE-2026-664516.5 Medium
- arraytics eventinEventin < 4.1.16 - Unauthenticated Payment Bypass via Order Status ManipulationCVE-2026-131787.5 High
- arraytics timeticsTimetics < 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment_methodCVE-2026-143225.3 Medium
- arraytics eventin – event calendar, event registration, tickets & booking (ai powered)Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST APICVE-2026-130395.3 Medium
- arraytics eventin – event calendar, event registration, tickets & booking (ai powered)Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' ParameterCVE-2026-129246.4 Medium
- arraytics wpcafe – restaurant menu, online food ordering & table booking systemWPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST APICVE-2026-118185.4 Medium
- arraytics timeticsWordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-576747.1 High
- arraytics bookticsWordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerabilityCVE-2026-576219.8 Critical
- arraytics wpcafeWordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerabilityCVE-2026-576224.3 Medium
- arraytics wp event solutionWordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerabilityCVE-2025-680457.5 High
- arraytics wp event solutionWordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerabilityCVE-2026-40776Public exploit7.5 High
- arraytics timeticsWordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerabilityCVE-2026-394328.2 High
- arraytics eventin – event calendar, event registration, tickets & booking (ai powered)Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information ExposureCVE-2026-41094.3 Medium
- arraytics bookticsWordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerabilityCVE-2026-395855.3 Medium
- arraytics wpcafeWordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerabilityCVE-2026-270719.1 Critical
- arraytics timeticsTimetics < 1.0.52 - Unauthenticated Payment/Booking Status UpdateCVE-2025-154734.3 Medium
- arraytics booktics – booking calendar for appointments and service businessesBooktics <= 1.0.16 - Missing Authorization to Addon Plugin InstallationCVE-2026-19205.3 Medium
- arraytics booktics – booking calendar for appointments and service businessesBooktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpointsCVE-2026-19195.3 Medium
- arraytics eventinWordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerabilityCVE-2025-680478.8 High
- arraytics eventin – event calendar, event registration, tickets & booking (ai powered)Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'CVE-2025-146577.2 High
- arraytics timeticsWordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerabilityCVE-2025-679158.8 High
- arraytics timetics – appointment booking & schedulingAppointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And ModificationCVE-2025-59196.5 Medium
- arraytics timeticsWordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerabilityCVE-2025-642687.5 High
- arraytics eventin – event calendar, event registration, tickets & booking (ai powered)Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request ForgeryCVE-2025-78137.2 High
- arraytics eventinWordPress Eventin Plugin <= 4.0.31 - PHP Object Injection VulnerabilityCVE-2025-498698.8 High
- themewinter eventin, arraytics eventin – event calendar, event registration, tickets & booking (ai powered) +1 moreEventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account TakeoverCVE-2025-4796Public exploit8.8 High
- arraytics eventinWordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-493217.1 High
- arraytics eventinWordPress Eventin plugin <= 4.0.26 - Privilege Escalation VulnerabilityCVE-2025-47539Public exploitEPSS 25.4%9.8 Critical
- arraytics eventinWordPress Eventin plugin <= 4.0.26 - Arbitrary File Download VulnerabilityCVE-2025-47445Public exploit7.5 High
- themewinter eventin, arraytics eventin – event calendar, event registration, tickets & booking (ai powered) +1 moreEvent Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File ReadCVE-2025-3419Public exploit7.5 High
- arraytics wpcafeWordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerabilityCVE-2025-394527.5 High
- arraytics eventinWordPress Eventin plugin <= 4.0.25 - Local File Inclusion VulnerabilityCVE-2025-395847.5 High
- arraytics wpcafeWordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerabilityCVE-2025-308297.5 High
- arraytics timeticsWordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerabilityCVE-2025-308285.3 Medium
- themewinter eventin, arraytics eventin – event calendar, event registration, tickets & booking (ai powered) +1 moreEvent Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status UpdateCVE-2025-17665.3 Medium
- themewinter eventin, arraytics eventin – event calendar, event registration, tickets & booking (ai powered) +1 moreEvent Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File InclusionCVE-2025-17708.8 High
- arraytics eventinWordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerabilityCVE-2025-269647.5 High
- arraytics eventinWordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerabilityCVE-2024-562136.5 Medium
- arraytics timetics – appointment booking & schedulingWP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User DeletionCVE-2024-112754.3 Medium
- arraytics wpcafeWordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerabilityCVE-2023-478055.3 Medium
- arraytics eventinWordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal VulnerabilityCVE-2023-497565.4 Medium
- arraytics timeticsWordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerabilityCVE-2024-374275.3 Medium
- arraytics timetics, wp timetics +1 moreWordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerabilityCVE-2024-439235.3 Medium
- arraytics timetics, timetics – appointment booking & scheduling +1 moreWP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account TakeoverCVE-2024-92639.8 Critical
- themewinter eventin, arraytics eventin – event calendar, event registration, tickets & booking (ai powered) +1 moreEvent Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File InclusionCVE-2024-71498.8 High
- arraytics wpcafeWordPress WPCafe plugin <= 2.2.28 - Local File Inclusion vulnerabilityCVE-2024-431357.5 High
- arraytics eventinWordPress Eventin plugin <= 4.0.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-396485.9 Medium
- arraytics eventinWordPress Eventin plugin <= 3.3.57 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-375076.5 Medium
- Show moreLoading…