Skip to content
OpenAdvisories

Product · Arraytics

Timetics – Appointment Booking & Scheduling

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover

    The WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin plugin for WordPress is vulnerable to Account Takeover/Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 1.0.25 via the save() …