Skip to content
OpenAdvisories

Vendor

Arraytics

80 known vulnerabilities.

Products

Booktics 12 Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) 12 WP Event Solution 12 Timetics 10 Eventin 9 Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce 6 WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System 6 WPCafe 5 Timetics – Appointment Booking & Scheduling 4 Booktics – Booking Calendar for Appointments and Service Businesses 2 Booktics – Appointment Booking Calendar for Service Businesses 1 Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-109894

    WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics booktics allows SQL Injection.This issue affects Booktics: from n/a through 1.0.29.

    Arraytics Booktics
  • Critical 9.8
    CVE-2026-57621

    WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions.

    Arraytics Booktics
  • Critical 9.1
    CVE-2026-27071

    WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Arraytics WPCafe wp-cafe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPCafe: from n/a through <= 3.0.7.

    Arraytics WPCafe
  • Critical 9.8
    CVE-2025-47539 Public exploit EPSS 25%

    WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability

    Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a through <= 4.0.26.

    Arraytics Eventin
  • Critical 9.8
    CVE-2024-9263

    WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover

    The WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin plugin for WordPress is vulnerable to Account Takeover/Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 1.0.25 via the save() …

    Arraytics Timetics – Appointment Booking & Scheduling Web / CMS