Vulnerabilidades en Arraytics
80 resultadosCVE-2024-1094HIGHTimetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin <= 1.0.21 - Missing Authorization to Limited Privilege EscalationEPSS 0.5%CVE-2024-43923MEDIUMWordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2023-47805MEDIUMWordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-1122MEDIUMEvent Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events ExportEPSS 0.5%CVE-2025-30828MEDIUMWordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-1855MEDIUMWPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request ForgeryEPSS 0.4%CVE-2026-15402MEDIUMEventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot ParameterEPSS 0.4%CVE-2025-67915HIGHWordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerabilityEPSS 0.4%CVE-2025-49869HIGHWordPress Eventin Plugin <= 4.0.31 - PHP Object Injection VulnerabilityEPSS 0.4%CVE-2026-40776HIGHWordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-12956MEDIUMEventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' ParameterEPSS 0.4%CVE-2026-11818MEDIUMWPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST APIEPSS 0.4%CVE-2026-11446MEDIUMBooktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing AuthorizationEPSS 0.4%CVE-2025-1766MEDIUMEvent Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status UpdateEPSS 0.4%CVE-2026-28174MEDIUMWordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerabilityEPSS 0.4%CVE-2024-6033MEDIUMEvent Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data ImportEPSS 0.4%CVE-2026-12924MEDIUMEventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' ParameterEPSS 0.4%CVE-2026-28002HIGHWordPress Booktics plugin 1.0.22 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-11601MEDIUMWPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/DeleteEPSS 0.4%CVE-2026-13039MEDIUMEventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST APIEPSS 0.4%