Vulnerabilities in Arraytics

62 results
Vexday analysis

A Arraytics apresenta 25 vulnerabilidades catalogadas, com 3 classificadas como críticas, mas nenhuma sob ataque ativo no momento. A fraqueza dominante (CWE-862 - falha de autorização) sugere problemas estruturais no controle de acesso. O ritmo de publicação de 6 CVEs nos últimos 90 dias indica atividade contínua de descoberta, recomendando monitoramento próximo.

CVE-2026-15398MEDIUMEventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+) Missing Authorization to Order Completion / Free Ticket RedemptionEPSS 0.3%CVE-2026-28174MEDIUMWordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-57622MEDIUMWordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-1919MEDIUMBooktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpointsEPSS 0.3%CVE-2026-28002HIGHWordPress Booktics plugin 1.0.22 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-57674HIGHWordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-15402MEDIUMEventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot ParameterEPSS 0.3%CVE-2026-39432HIGHWordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-49321HIGHWordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-82223MEDIUMWordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-84215MEDIUMWordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-5919MEDIUMAppointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And ModificationEPSS 0.2%CVE-2026-12956MEDIUMEventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' ParameterEPSS 0.2%CVE-2026-11446MEDIUMBooktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing AuthorizationEPSS 0.2%CVE-2026-1920MEDIUMBooktics <= 1.0.16 - Missing Authorization to Addon Plugin InstallationEPSS 0.2%CVE-2026-28173HIGHWordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerabilityEPSS 0.2%CVE-2026-66451MEDIUMWordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerabilityEPSS 0.2%CVE-2025-68045HIGHWordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-11821MEDIUMEventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API EndpointEPSS 0.2%CVE-2026-39585MEDIUMWordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerabilityEPSS 0.2%