Login Request a demo
AR
Vendor
Arraytics
12 products with CVEs on record
50
CVEs
0
On KEV
15
New 30D
Products
BO
Booktics
Arraytics
9.8
10 CVEs0 on KEV6 new
WE
WP Event Solution
Arraytics
7.5
12 CVEs0 on KEV6 new
WR
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
arraytics
7.5
3 CVEs0 on KEV2 new
TI
Timetics
Arraytics
8.8
6 CVEs0 on KEV1 new
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
7.5
6 CVEs0 on KEV0 new
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
7.2
4 CVEs0 on KEV0 new
BB
Booktics – Booking Calendar for Appointments and Service Businesses
arraytics
5.3
2 CVEs0 on KEV0 new
EV
Eventin
Arraytics
8.8
2 CVEs0 on KEV0 new
WP
WPCafe
Arraytics
9.1
2 CVEs0 on KEV0 new
BA
Booktics – Appointment Booking Calendar for Service Businesses
arraytics
5.3
1 CVEs0 on KEV0 new
TA
Timetics – Appointment Booking & Scheduling
arraytics
6.5
1 CVEs0 on KEV0 new
WT
WP Timetics
Arraytics
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-112844
New
WE
WP Event Solution
Arraytics
7.1
0%
Oct 24WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability
CVE-2026-112829
BO
Booktics
Arraytics
5.3
0%
Oct 20WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability
CVE-2026-109895
BO
Booktics
Arraytics
7.1
0%
Oct 18WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability
CVE-2026-109894
BO
Booktics
Arraytics
9.3
0%
Oct 18WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability
CVE-2026-110380
WE
WP Event Solution
Arraytics
5.3
0%
Oct 16WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability
CVE-2026-109898
WE
WP Event Solution
Arraytics
5.3
0%
Oct 13WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
CVE-2026-107418
BO
Booktics
Arraytics
5.4
0%
Oct 12WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
CVE-2026-108477
BO
Booktics
Arraytics
5.3
0%
Oct 12WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
CVE-2026-104390
BO
Booktics
Arraytics
4.3
0%
Oct 7WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability
CVE-2026-97300
WE
WP Event Solution
Arraytics
6.5
0%
Oct 6WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
CVE-2026-97304
TI
Timetics
Arraytics
6.5
0%
Oct 5WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability
CVE-2026-103684
WE
WP Event Solution
Arraytics
5.3
0%
Oct 5WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
CVE-2026-105073
WE
WP Event Solution
Arraytics
5.3
0%
Oct 5WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability
CVE-2026-11601
WR
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
arraytics
5.3
0%
Oct 3WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete
CVE-2026-75028
WR
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
arraytics
7.5
1%
Oct 3WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting
CVE-2026-75983
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
7.5
1%
Sep 15Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter
CVE-2026-15402
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
6.4
0%
Sep 15Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter
CVE-2026-62135
BO
Booktics
Arraytics
5.3
0%
Sep 11WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability
CVE-2026-11446
BA
Booktics – Appointment Booking Calendar for Service Businesses
arraytics
5.3
0%
Sep 11Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization
CVE-2026-11821
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
5.4
0%
Sep 9Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint
CVE-2026-15667
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
7.5
1%
Sep 9Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter
CVE-2026-15406
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
7.5
1%
Sep 9Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter
CVE-2026-12956
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
5.3
0%
Sep 9Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter
CVE-2026-84215
TI
Timetics
Arraytics
6.5
0%
Sep 3WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerability
CVE-2026-82223
WE
WP Event SOlution
Arraytics
6.5
0%
Sep 2WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability
CVE-2026-28002
BO
Booktics
Arraytics
8.5
0%
Aug 13WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability
CVE-2026-28174
WE
WP Event SOlution
Arraytics
6.5
0%
Aug 13WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability
CVE-2026-28173
WE
WP Event SOlution
Arraytics
7.1
0%
Aug 13WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability
CVE-2026-66451
WE
WP Event SOlution
Arraytics
6.5
0%
Aug 6WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability
CVE-2026-13039
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
5.3
0%
Jul 10Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API
CVE-2026-12924
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
6.4
0%
Jul 10Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter
CVE-2026-11818
WR
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
arraytics
5.4
0%
Jul 10WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API
CVE-2026-57674
TI
Timetics
Arraytics
7.1
0%
Jul 2WordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57621
BO
Booktics
Arraytics
9.8
1%
Jul 2WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability
CVE-2026-57622
WP
WPCafe
Arraytics
4.3
0%
Jun 26WordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerability
CVE-2025-68045
WE
WP Event Solution
Arraytics
7.5
0%
Jun 16WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability
CVE-2026-40776
WE
WP Event SOlution
Arraytics
7.5
0%
Jun 15WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability
CVE-2026-39432
TI
Timetics
Arraytics
8.2
0%
May 12WordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerability
CVE-2026-4109
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
4.3
0%
Apr 14Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure
CVE-2026-39585
BO
Booktics
Arraytics
5.3
0%
Apr 8WordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerability
CVE-2026-27071
WP
WPCafe
Arraytics
9.1
0%
Mar 25WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability
CVE-2026-1919
BB
Booktics – Booking Calendar for Appointments and Service Businesses
arraytics
5.3
0%
Mar 10Booktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpoints
CVE-2026-1920
BB
Booktics – Booking Calendar for Appointments and Service Businesses
arraytics
5.3
0%
Mar 10Booktics <= 1.0.16 - Missing Authorization to Addon Plugin Installation
CVE-2025-68047
EV
Eventin
Arraytics
8.8
1%
Jan 22WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability
CVE-2025-14657
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
7.2
0%
Jan 9Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'
CVE-2025-67915
TI
Timetics
Arraytics
8.8
0%
Jan 8WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability
CVE-2025-5919
TA
Timetics – Appointment Booking & Scheduling
arraytics
6.5
0%
Jan 6Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification
CVE-2025-64268
TI
Timetics
Arraytics
7.5
0%
Dec 18WordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerability
CVE-2024-56213
EV
Eventin
Arraytics
8.8
1%
Dec 31WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability
CVE-2024-43923
WT
WP Timetics
Arraytics
9.8
1%
Nov 1Missing Authorization vulnerability in Arraytics Timetics allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Timetics: from n/a through 1.0.23