108 matches found
CVE-2026-107418: Missing Authorization
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...
CVE-2026-108477: Missing Authorization
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28...
CVE-2026-104390
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...
CVE-2026-104390
The Booktics WordPress plugin (versions up to and including 1.0.27 ) is affected by a Broken Access Control vulnerability. This issue stems from Missing Authorization (CWE-862), where incorrectly configured access control security levels allow for unauthorized actions. The impact is categorized a...
CVE-2026-104390 WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...
EUVD-2026-94259
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...
CVE-2026-104390 WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...
WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Oly Hossen in WordPress Plugin Booktics versions = 1.0.27...
CVE-2026-104390: Missing Authorization
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...
PT-2026-107455
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27...
CVE-2026-62135
Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...
CVE-2026-62135
CVE-2026-62135 affects the WordPress Booktics plugin in versions ≤ 1.0.24 , introducing an unauthenticated Broken Access Control vulnerability. The flaw allows remote attackers with no prior access to modify data on the target site, resulting in a low integrity impact (CVSS 3.1: 5.3 MEDIUM , vect...
CVE-2026-62135 WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...
EUVD-2026-76202
Unauthenticated Broken Access Control in Booktics = 1.0.24 versions...
CVE-2026-11446
The Booktics – Booking Calendar for Appointments and Service Businesses plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.0.23. This is due to the createorderpermission permission callback on the POST /wp-json/booktics/v1/orders REST...
CVE-2026-11446 Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization
The Booktics – Booking Calendar for Appointments and Service Businesses plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.0.23. This is due to the createorderpermission permission callback on the POST /wp-json/booktics/v1/orders REST...
CVE-2026-11446
The Booktics – Booking Calendar for Appointments and Service Businesses WordPress plugin (≤ 1.0.23) is vulnerable to unauthorized data modification due to a missing authorization check. The create_order_permission() callback on the POST /wp-json/booktics/v1/orders REST route unconditionally retur...
CVE-2026-11446 Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization
The Booktics – Booking Calendar for Appointments and Service Businesses plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.0.23. This is due to the createorderpermission permission callback on the POST /wp-json/booktics/v1/orders REST...
EUVD-2026-75936
The Booktics – Booking Calendar for Appointments and Service Businesses plugin for WordPress is vulnerable to unauthorized modification of data in all versions up to, and including, 1.0.23. This is due to the createorderpermission permission callback on the POST /wp-json/booktics/v1/orders REST...