CVEs we hold for Arraytics
Records whose assigning authority named Arraytics as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-84215WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerabilityArraytics Timetics
CVE-2026-82223WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerabilityArraytics WP Event SOlution
CVE-2026-75983Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+)…arraytics Eventin – Event Calendar, Tickets, Registration…
CVE-2026-66451WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerabilityArraytics WP Event SOlution
CVE-2026-62135WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerabilityArraytics Booktics
CVE-2026-57674WordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerabilityArraytics Timetics
CVE-2026-57622WordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerabilityArraytics WPCafe
CVE-2026-57621WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerabilityArraytics Booktics
CVE-2026-4109Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to…arraytics Eventin – Event Calendar, Event Registration…
CVE-2026-40776WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerabilityArraytics WP Event SOlution
CVE-2026-39585WordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerabilityArraytics Booktics
CVE-2026-39432WordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerabilityArraytics Timetics
CVE-2026-28174WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerabilityArraytics WP Event SOlution
CVE-2026-28173WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerabilityArraytics WP Event SOlution
CVE-2026-27071WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerabilityArraytics WPCafe
CVE-2026-1920Booktics <= 1.0.16 - Missing Authorization to Addon Plugin Installationarraytics Booktics – Booking Calendar for Appointments and…
CVE-2026-1919Booktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpointsarraytics Booktics – Booking Calendar for Appointments and…
CVE-2026-15667Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameterarraytics Eventin – Event Calendar, Tickets, Registration…
CVE-2026-15406Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameterarraytics Eventin – Event Calendar, Tickets, Registration…
CVE-2026-15402Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot…arraytics Eventin – Event Calendar, Tickets, Registration…
CVE-2026-15398Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) <= 4.1.22 - Authenticated (Subscriber+)…arraytics Eventin – Event Calendar, Tickets, Registration…
CVE-2026-13039Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST APIarraytics Eventin – Event Calendar, Event Registration…
CVE-2026-12956Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via…arraytics Eventin – Event Calendar, Tickets, Registration…
CVE-2026-12924Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameterarraytics Eventin – Event Calendar, Event Registration…
CVE-2026-11821Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via…arraytics Eventin – Event Calendar, Tickets, Registration…
CVE-2026-11818WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST APIarraytics WPCafe – Restaurant Menu, Online Food Ordering &…
CVE-2026-11446Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorizationarraytics Booktics – Appointment Booking Calendar for…
CVE-2025-7813Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side…arraytics Eventin – Event Calendar, Event Registration…
CVE-2025-68047WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerabilityArraytics Eventin
CVE-2025-68045WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerabilityArraytics WP Event SOlution
CVE-2025-67915WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerabilityArraytics Timetics
CVE-2025-64268WordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerabilityArraytics Timetics
CVE-2025-5919Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated…arraytics Timetics – Appointment Booking & Scheduling
CVE-2025-49869WordPress Eventin Plugin <= 4.0.31 - PHP Object Injection VulnerabilityArraytics Eventin
CVE-2025-49321WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) VulnerabilityArraytics Eventin
CVE-2025-4796Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeoverarraytics Eventin – Event Calendar, Event Registration…
CVE-2025-47539WordPress Eventin plugin <= 4.0.26 - Privilege Escalation VulnerabilityArraytics Eventin
CVE-2025-47445WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download VulnerabilityArraytics Eventin
CVE-2025-39584WordPress Eventin plugin <= 4.0.25 - Local File Inclusion VulnerabilityArraytics Eventin
CVE-2025-39452WordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerabilityArraytics WPCafe
CVE-2025-3419Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Readarraytics Eventin – Event Calendar, Event Registration…
CVE-2025-30829WordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerabilityArraytics WPCafe
CVE-2025-30828WordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerabilityArraytics Timetics
CVE-2025-26964WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerabilityArraytics Eventin
CVE-2025-1770Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File…arraytics Eventin – Event Calendar, Event Registration…
CVE-2025-1766Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated…arraytics Eventin – Event Calendar, Event Registration…
CVE-2025-14657Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing…arraytics Eventin – Event Calendar, Event Registration…
CVE-2024-9263WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object…arraytics Timetics – Appointment Booking & Scheduling
CVE-2024-7149Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File…arraytics Eventin – Event Calendar, Event Registration…
CVE-2024-6033Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated…arraytics Eventin – Event Calendar, Event Registration…
CVE-2024-56213WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerabilityArraytics Eventin
CVE-2024-5431WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated…arraytics WPCafe – Restaurant Menu, Online Food Ordering &…
CVE-2024-5427WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated…arraytics WPCafe – Restaurant Menu, Online Food Ordering &…
CVE-2024-43923WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerabilityArraytics Timetics
CVE-2024-37427WordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerabilityArraytics Timetics
CVE-2024-1855WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgeryarraytics WPCafe – Restaurant Menu, Online Food Ordering &…
CVE-2024-11275WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to…arraytics Timetics – Appointment Booking & Scheduling
CVE-2024-1122Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to…arraytics Eventin – Event Calendar, Event Registration…
CVE-2024-1094Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin <= 1.0.21 -…arraytics Timetics – Appointment Booking & Scheduling
CVE-2023-49756WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal VulnerabilityArraytics Eventin
CVE-2023-47805WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerabilityArraytics WPCafe
62 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.