Login Request a demo
AR
Vendor
Arraytics
12 products with CVEs on record
79
CVEs
0
On KEV
15
New 30D
Products
BO
Booktics
Arraytics
9.8
10 CVEs0 on KEV6 new
WE
WP Event Solution
Arraytics
7.5
12 CVEs0 on KEV6 new
TI
Timetics
Arraytics
9.8
11 CVEs0 on KEV1 new
WR
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
arraytics
8.8
6 CVEs0 on KEV2 new
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
8.8
12 CVEs0 on KEV0 new
EV
Eventin
Arraytics
9.8
9 CVEs0 on KEV0 new
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
7.5
6 CVEs0 on KEV0 new
WP
WPCafe
Arraytics
9.8
5 CVEs0 on KEV0 new
TA
Timetics – Appointment Booking & Scheduling
arraytics
9.8
4 CVEs0 on KEV0 new
BB
Booktics – Booking Calendar for Appointments and Service Businesses
arraytics
5.3
2 CVEs0 on KEV0 new
BA
Booktics – Appointment Booking Calendar for Service Businesses
arraytics
5.3
1 CVEs0 on KEV0 new
WT
WP Timetics
Arraytics
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-112844
New
WE
WP Event Solution
Arraytics
7.1
0%
Oct 24WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability
CVE-2026-112829
BO
Booktics
Arraytics
5.3
0%
Oct 20WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability
CVE-2026-109895
BO
Booktics
Arraytics
7.1
0%
Oct 18WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability
CVE-2026-109894
BO
Booktics
Arraytics
9.3
0%
Oct 18WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability
CVE-2026-110380
WE
WP Event Solution
Arraytics
5.3
0%
Oct 16WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability
CVE-2026-109898
WE
WP Event Solution
Arraytics
5.3
0%
Oct 13WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
CVE-2026-107418
BO
Booktics
Arraytics
5.4
0%
Oct 12WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
CVE-2026-108477
BO
Booktics
Arraytics
5.3
0%
Oct 12WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
CVE-2026-104390
BO
Booktics
Arraytics
4.3
0%
Oct 7WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability
CVE-2026-97300
WE
WP Event Solution
Arraytics
6.5
0%
Oct 6WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
CVE-2026-97304
TI
Timetics
Arraytics
6.5
0%
Oct 5WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability
CVE-2026-103684
WE
WP Event Solution
Arraytics
5.3
0%
Oct 5WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability
CVE-2026-105073
WE
WP Event Solution
Arraytics
5.3
0%
Oct 5WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability
CVE-2026-11601
WR
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
arraytics
5.3
0%
Oct 3WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete
CVE-2026-75028
WR
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
arraytics
7.5
1%
Oct 3WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting
CVE-2026-75983
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
7.5
1%
Sep 15Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter
CVE-2026-15402
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
6.4
0%
Sep 15Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter
CVE-2026-62135
BO
Booktics
Arraytics
5.3
0%
Sep 11WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability
CVE-2026-11446
BA
Booktics – Appointment Booking Calendar for Service Businesses
arraytics
5.3
0%
Sep 11Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization
CVE-2026-11821
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
5.4
0%
Sep 9Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint
CVE-2026-15667
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
7.5
1%
Sep 9Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter
CVE-2026-15406
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
7.5
1%
Sep 9Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter
CVE-2026-12956
EE
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
arraytics
5.3
0%
Sep 9Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter
CVE-2026-84215
TI
Timetics
Arraytics
6.5
0%
Sep 3WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerability
CVE-2026-82223
WE
WP Event SOlution
Arraytics
6.5
0%
Sep 2WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability
CVE-2026-28002
BO
Booktics
Arraytics
8.5
0%
Aug 13WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability
CVE-2026-28174
WE
WP Event SOlution
Arraytics
6.5
0%
Aug 13WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability
CVE-2026-28173
WE
WP Event SOlution
Arraytics
7.1
0%
Aug 13WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability
CVE-2026-66451
WE
WP Event SOlution
Arraytics
6.5
0%
Aug 6WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability
CVE-2026-13039
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
5.3
0%
Jul 10Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API
CVE-2026-12924
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
6.4
0%
Jul 10Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter
CVE-2026-11818
WR
WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System
arraytics
5.4
0%
Jul 10WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API
CVE-2026-57674
TI
Timetics
Arraytics
7.1
0%
Jul 2WordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57621
BO
Booktics
Arraytics
9.8
1%
Jul 2WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability
CVE-2026-57622
WP
WPCafe
Arraytics
4.3
0%
Jun 26WordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerability
CVE-2025-68045
WE
WP Event Solution
Arraytics
7.5
0%
Jun 16WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability
CVE-2026-40776
WE
WP Event SOlution
Arraytics
7.5
0%
Jun 15WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability
CVE-2026-39432
TI
Timetics
Arraytics
8.2
0%
May 12WordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerability
CVE-2026-4109
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
4.3
0%
Apr 14Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure
CVE-2026-39585
BO
Booktics
Arraytics
5.3
0%
Apr 8WordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerability
CVE-2026-27071
WP
WPCafe
Arraytics
9.1
0%
Mar 25WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability
CVE-2026-1919
BB
Booktics – Booking Calendar for Appointments and Service Businesses
arraytics
5.3
0%
Mar 10Booktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpoints
CVE-2026-1920
BB
Booktics – Booking Calendar for Appointments and Service Businesses
arraytics
5.3
0%
Mar 10Booktics <= 1.0.16 - Missing Authorization to Addon Plugin Installation
CVE-2025-68047
EV
Eventin
Arraytics
8.8
1%
Jan 22WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability
CVE-2025-14657
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
7.2
0%
Jan 9Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'
CVE-2025-67915
TI
Timetics
Arraytics
8.8
0%
Jan 8WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability
CVE-2025-5919
TA
Timetics – Appointment Booking & Scheduling
arraytics
6.5
0%
Jan 6Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification
CVE-2025-64268
TI
Timetics
Arraytics
7.5
0%
Dec 18WordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerability
CVE-2025-7813
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
7.2
0%
Aug 23Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery
CVE-2025-49869
EV
Eventin
Arraytics
8.8
0%
Aug 14WordPress Eventin Plugin <= 4.0.31 - PHP Object Injection Vulnerability
CVE-2025-4796
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
8.8
1%
Aug 8Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover
CVE-2025-49321
EV
Eventin
Arraytics
6.1
0%
Jun 27WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-47539
EV
Eventin
Arraytics
9.8
25%
May 23WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability
CVE-2025-47445
EV
Eventin
Arraytics
9.8
5%
May 14WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability
CVE-2025-3419
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
7.5
1%
May 8Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read
CVE-2025-39452
WP
WPCafe
Arraytics
7.5
1%
Apr 17WordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerability
CVE-2025-39584
EV
Eventin
Arraytics
7.5
1%
Apr 16WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability
CVE-2025-30829
WP
WPCafe
Arraytics
7.5
1%
Mar 27WordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerability
CVE-2025-30828
TI
Timetics
Arraytics
5.3
0%
Mar 27WordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerability
CVE-2025-1766
EE
Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)
arraytics
5.3
0%
Mar 20Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update