Log in Start free

Arraytics

Products

ProductCVEsExploitedLatest
Booktics12–Oct 30, 2026
WP Event SOlution12–Oct 24, 2026
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)12–Jul 10, 2026
Timetics10–Oct 30, 2026
Eventin9–Jan 22, 2026
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System6–Oct 3, 2026
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce6–Sep 15, 2026
WPCafe5–Jun 26, 2026
Timetics – Appointment Booking & Scheduling4–Jan 6, 2026
Booktics – Booking Calendar for Appointments and Service Businesses2–Mar 10, 2026
Booktics – Appointment Booking Calendar for Service Businesses1–Sep 11, 2026

Exploited and recent CVEs

  • CVE-2026-104674 Medium 4.3 WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability 0.2%
  • CVE-2026-62122 Medium 5.3 WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability 0.3%
  • CVE-2026-116860 Medium 5.3 WordPress Timetics plugin <= 1.0.65 - Broken Access Control vulnerability 0.2%
  • CVE-2026-112844 High 7.1 WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-112829 Medium 5.3 WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability 0.3%
  • CVE-2026-109895 High 7.1 WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-109894 Critical 9.3 WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability 0.2%
  • CVE-2026-110380 Medium 5.3 WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability 0.2%
  • CVE-2026-109898 Medium 5.3 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability 0.2%
  • CVE-2026-107418 Medium 5.4 WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability 0.2%
  • CVE-2026-108477 Medium 5.3 WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability 0.2%
  • CVE-2026-104390 Medium 4.3 WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability 0.2%
  • CVE-2026-97300 Medium 6.5 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability 0.2%
  • CVE-2026-97304 Medium 6.5 WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability 0.2%
  • CVE-2026-103684 Medium 5.3 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability 0.2%
  • CVE-2026-105073 Medium 5.3 WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability 0.2%
  • CVE-2026-11601 Medium 5.3 WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete 0.4%
  • CVE-2026-75028 High 7.5 WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting 0.7%
  • CVE-2026-75983 High 7.5 Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter 0.7%
  • CVE-2026-15402 Medium 6.4 Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter 0.4%
  • CVE-2026-62135 Medium 5.3 WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability 0.3%
  • CVE-2026-11446 Medium 5.3 Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization 0.4%
  • CVE-2026-11821 Medium 5.4 Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint 0.3%
  • CVE-2026-15667 High 7.5 Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter 1.0%
  • CVE-2026-15406 High 7.5 Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter 1.1%
  • CVE-2026-12956 Medium 5.3 Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter 0.4%
  • CVE-2026-84215 Medium 6.5 WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerability 0.3%
  • CVE-2026-82223 Medium 6.5 WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability 0.3%
  • CVE-2026-28002 High 8.5 WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability 0.4%
  • CVE-2026-28174 Medium 6.5 WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability 0.4%