Arraytics vulnerabilities
80 CVEs and advisories name Arraytics as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-109994Eventin <= 4.1.29 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'id' Parameter
- CVE-2026-104674WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability
- CVE-2026-62122WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability
- CVE-2026-116860WordPress Timetics plugin <= 1.0.65 - Broken Access Control vulnerability
- CVE-2026-112844WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-112829WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability
- CVE-2026-109895WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-109894WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability
- CVE-2026-110380WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability
- CVE-2026-109898WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
- CVE-2026-107418WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
- CVE-2026-108477WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
- CVE-2026-104390WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability
- CVE-2026-97300WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
- CVE-2026-97304WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability
- CVE-2026-103684WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
- CVE-2026-105073WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability
- CVE-2026-11601WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete
- CVE-2026-75028WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting
- CVE-2026-75983Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter
- CVE-2026-15402Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter
- CVE-2026-62135WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability
- CVE-2026-11446Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization
- CVE-2026-11821Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint
- CVE-2026-15667Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter
- CVE-2026-15406Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter
- CVE-2026-12956Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter
- CVE-2026-84215WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerability
- CVE-2026-82223WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability
- CVE-2026-28002WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability