Arraytics vulnerabilities
79 published CVEs name Arraytics among the affected products.
- Published CVEs
- 79
- Last 12 months
- 51
- Critical
- 5
- Known exploited
- 0
Critical 5High 30Medium 44Low 0Not scored 0
CVEs per yearBy the year they were published
- 202414
- 202515
- 202650
Newest CVEs
- CVE-2026-104674
WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability
Arraytics · Booktics
Medium4.3 - CVE-2026-62122
WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability
Arraytics · Booktics
Medium5.3 - CVE-2026-116860
WordPress Timetics plugin <= 1.0.65 - Broken Access Control vulnerability
Arraytics · Timetics
Medium5.3 - CVE-2026-112844
WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability
Arraytics · WP Event Solution
High7.1 - CVE-2026-112829
WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability
Arraytics · Booktics
Medium5.3 - CVE-2026-109895
WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability
Arraytics · Booktics
High7.1 - CVE-2026-109894
WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability
Arraytics · Booktics
Critical9.3 - CVE-2026-110380
WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability
Arraytics · WP Event Solution
Medium5.3 - CVE-2026-109898
WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
Arraytics · WP Event Solution
Medium5.3 - CVE-2026-107418
WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
Arraytics · Booktics
Medium5.4
Products with the most CVEs
- Booktics12
- Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)12
- WP Event Solution12
- Timetics10
- Eventin9
- Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce6
- WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System6
- WPCafe5
- Timetics – Appointment Booking & Scheduling4
- Booktics – Booking Calendar for Appointments and Service Businesses2
Most common weaknesses
- CWE-862 Missing authorization40
- CWE-98 PHP remote file inclusion8
- CWE-79 Cross-site scripting (XSS)7
- CWE-22 Path traversal3
- CWE-502 Deserialization of untrusted data3
- CWE-639 Authorization bypass through a user-controlled key (IDOR)3
- CWE-288 2
- CWE-306 Missing authentication for a critical function2
- CWE-89 SQL injection2
- CWE-918 Server-side request forgery (SSRF)2