Arraytics - vulnerabilities (CVEs)

76 CVEs in 17 products, 15 in the last 30 days, newest from 2026-10-24.

Products

Eventin Event Calendar - 18 CVEs
Event Registration - 12 CVEs
Tickets Booking Ai Powered - 12 CVEs
Wp Event Solution - 12 CVEs
Booktics - 10 CVEs
Eventin - 9 CVEs
Timetics - 9 CVEs
Booking Woocommerce - 6 CVEs
Online Food Ordering Table Booking System - 6 CVEs
Registration - 6 CVEs
Tickets - 6 CVEs
Wpcafe Restaurant Menu - 6 CVEs
Wpcafe - 5 CVEs
Timetics Appointment Booking Scheduling - 4 CVEs
Booktics Booking Calendar For Appointments And Service Businesses - 2 CVEs
Booktics Appointment Booking Calendar For Service Businesses - 1 CVEs
Wp Timetics - 1 CVEs

Newest CVEs of Arraytics

CVE-2026-112844 - CVSS 7.1 (high), 2026-10-24: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event Solution wp-event-solution allows…
CVE-2026-112829 - CVSS 5.3 (medium), 2026-10-20: Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2026-109895 - CVSS 7.1 (high), 2026-10-18: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics booktics allows DOM-Based XSS.This…
CVE-2026-109894 - CVSS 9.3 (critical), 2026-10-18: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics booktics allows SQL Injection.This…
CVE-2026-110380 - CVSS 5.3 (medium), 2026-10-16: Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security…
CVE-2026-109898 - CVSS 5.3 (medium), 2026-10-13: Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security…
CVE-2026-107418 - CVSS 5.4 (medium), 2026-10-12: Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2026-108477 - CVSS 5.3 (medium), 2026-10-12: Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2026-104390 - CVSS 4.3 (medium), 2026-10-07: Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2026-97300 - CVSS 6.5 (medium), 2026-10-06: Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions.
CVE-2026-97304 - CVSS 6.5 (medium), 2026-10-05: Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2026-103684 - CVSS 5.3 (medium), 2026-10-05: Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security…
CVE-2026-105073 - CVSS 5.3 (medium), 2026-10-05: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve…
CVE-2026-11601 - CVSS 5.3 (medium), 2026-10-03: The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to authorization bypass in all versions up to,…
CVE-2026-75028 - CVSS 7.5 (high), 2026-10-03: The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to,…
CVE-2026-75983 - CVSS 7.5 (high), 2026-09-15: The Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to,…
CVE-2026-15402 - CVSS 6.4 (medium), 2026-09-15: The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2026-62135 - CVSS 5.3 (medium), 2026-09-11: Unauthenticated Broken Access Control in Booktics <= 1.0.24 versions.
CVE-2026-11446 - CVSS 5.3 (medium), 2026-09-11: The Booktics – Booking Calendar for Appointments and Service Businesses plugin for WordPress is vulnerable to unauthorized modification of data in all…
CVE-2026-11821 - CVSS 5.4 (medium), 2026-09-09: The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to authorization bypass in all versions up…
CVE-2026-15667 - CVSS 7.5 (high), 2026-09-09: The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up…
CVE-2026-15406 - CVSS 7.5 (high), 2026-09-09: The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to Local File Inclusion in all versions up…
CVE-2026-12956 - CVSS 5.3 (medium), 2026-09-09: The WP Event Solution (Eventin) plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 4.1.22 via the create_item()…
CVE-2026-84215 - CVSS 6.5 (medium), 2026-09-03: Unauthenticated Broken Access Control in Timetics <= 1.0.61 versions.
CVE-2026-82223 - CVSS 6.5 (medium), 2026-09-02: Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.22 versions.
CVE-2026-28002 - CVSS 8.5 (high), 2026-08-13: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection. This…
CVE-2026-28174 - CVSS 6.5 (medium), 2026-08-13: Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.
CVE-2026-28173 - CVSS 7.1 (high), 2026-08-13: Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.
CVE-2026-66451 - CVSS 6.5 (medium), 2026-08-06: Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.
CVE-2026-13039 - CVSS 5.3 (medium), 2026-07-10: The Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) plugin for WordPress is vulnerable to authorization bypass due to a…