Skip to content
OpenAdvisories

Vendor

Arraytics

80 known vulnerabilities.

Products

Booktics 12 Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) 12 WP Event Solution 12 Timetics 10 Eventin 9 Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce 6 WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System 6 WPCafe 5 Timetics – Appointment Booking & Scheduling 4 Booktics – Booking Calendar for Appointments and Service Businesses 2 Booktics – Appointment Booking Calendar for Service Businesses 1 Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

45 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-43923

    WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Arraytics Timetics allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Timetics: from n/a through 1.0.23.

    Arraytics Timetics
  • Medium 4.3
    CVE-2024-6033

    Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import

    The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized data importation due to a missing capability check on the 'import_file' function in all versions up to, and including, 4.0.4. This makes it…

    Arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) Web / CMS
  • Medium 6.4
    CVE-2024-5427

    WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode

    The WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Reservation Form shortcode in all versions up to, and including, 2.2.24 due to in…

    Arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System Web / CMS
  • Medium 5.3
    CVE-2024-1855

    WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery

    The WPCafe – Restaurant Menu, Online Ordering for WooCommerce, Pickup / Delivery and Table Reservation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.2.23 via the wpc_check_for_submission function. Th…

    Arraytics WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System Web / CMS
  • Medium 5.3
    CVE-2024-1122

    Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export

    The Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_data() function in all versions up to, and including, 3.3.50. This m…

    Arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) Web / CMS