Arraytics vulnerabilities
80 CVEs and advisories name Arraytics as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-39584WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability
- CVE-2025-30829WordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerability
- CVE-2025-30828WordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerability
- CVE-2025-1766Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update
- CVE-2025-1770Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion
- CVE-2025-26964WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability
- CVE-2024-56213WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability
- CVE-2024-11275WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletion
- CVE-2023-47805WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability
- CVE-2023-49756WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability
- CVE-2024-37427WordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerability
- CVE-2024-43923WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability
- CVE-2024-9263WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover
- CVE-2024-7149Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion
- CVE-2024-6033Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import
- CVE-2024-5431WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode
- CVE-2024-1094Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin <= 1.0.21 - Missing Authorization to Limited Privilege Escalation
- CVE-2024-5427WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode
- CVE-2024-1855WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery
- CVE-2024-1122Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export