Lucene search
K

93 matches found

RedhatCVE
RedhatCVE
added 2026/01/10 5:41 a.m.2 views

CVE-2025-67915

Authentication Bypass Using an Alternate Path or Channel vulnerability in Arraytics Timetics timetics allows Authentication Abuse.This issue affects Timetics: from n/a through = 1.0.46...

8.8CVSS5.9AI score0.00081EPSS
Exploits0References1
NVD
NVD
added 2026/01/08 10:15 a.m.1 views

CVE-2025-67915

Authentication Bypass Using an Alternate Path or Channel vulnerability in Arraytics Timetics timetics allows Authentication Abuse.This issue affects Timetics: from n/a through = 1.0.46...

8.8CVSS0.00081EPSS
Exploits0References1
CVE
CVE
added 2026/01/08 9:17 a.m.8 views

CVE-2025-67915

CVE-2025-67915 affects the Timetics: Appointment Booking Calendar (WP Timetics Booking Plugin) Timetics <= 1.0.46. Wordfence reports an Incorrect Authorization issue (Authenticated Timetics Customer+) that enables user creation, i.e., an authentication/authorization bypass leading to account c...

8.8CVSS6.6AI score0.00081EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/08 9:17 a.m.1 views

CVE-2025-67915 WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Arraytics Timetics timetics allows Authentication Abuse.This issue affects Timetics: from n/a through = 1.0.46...

8.8CVSS6.6AI score0.00081EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/08 9:17 a.m.24 views

CVE-2025-67915 WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Arraytics Timetics timetics allows Authentication Abuse.This issue affects Timetics: from n/a through = 1.0.46...

8.8CVSS0.00081EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/08 12:0 a.m.1 views

WordPress plugin Timetics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.8CVSS6.8AI score0.00081EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/08 12:0 a.m.2 views

PT-2026-1892

Name of the Vulnerable Software and Affected Versions Arraytics Timetics versions n/a through 1.0.46 Description The software contains an authentication bypass issue allowing authentication abuse through an alternate path or channel. Recommendations Update Arraytics Timetics to a version later th...

9.8CVSS6.8AI score0.00081EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2026/01/07 9:19 a.m.3 views

CVE-2025-5919

The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the update and registerroutes functions in all versions up to, and including, 1.0.36. This makes it possible...

6.5CVSS5.2AI score0.00102EPSS
Exploits0References1
CVE
CVE
added 2026/01/06 8:21 a.m.13 views

CVE-2025-5919

CVE-2025-5919 affects the WordPress plugin “Appointment Booking Calendar – WP Timetics Booking Plugin.” The vulnerability stems from a missing capability check in the update and register_routes functions across versions up to 1.0.36, allowing unauthenticated attackers to view and modify booking d...

6.5CVSS5AI score0.00102EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/01/06 8:21 a.m.24 views

CVE-2025-5919 Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification

The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the update and registerroutes functions in all versions up to, and including, 1.0.36. This makes it possible...

6.5CVSS0.00102EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/01/06 8:21 a.m.2 views

CVE-2025-5919 Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification

The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the update and registerroutes functions in all versions up to, and including, 1.0.36. This makes it possible...

6.5CVSS5AI score0.00102EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/06 8:13 a.m.5 views

WordPress Timetics plugin <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification vulnerability

Missing Authorization to Unauthenticated Booking Details View And Modification vulnerability discovered by greenhats - Student in WordPress Plugin Timetics versions = 1.0.36...

6.5CVSS6.8AI score0.00102EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/06 12:0 a.m.3 views

PT-2026-1426

Name of the Vulnerable Software and Affected Versions WP Timetics versions prior to 1.0.37 Description The Appointment Booking and Scheduling Calendar Plugin – WP Timetics for WordPress is susceptible to unauthorized access and modification of data. This is due to a missing capability check on th...

6.5CVSS6.2AI score0.00102EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/01/06 12:0 a.m.3 views

WordPress plugin Appointment Booking and Scheduling Calendar Plugin – WP Timetics 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. WordPress plugin...

6.5CVSS6.3AI score0.00102EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/05 5:58 a.m.7 views

WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by daroo in WordPress Plugin Timetics versions = 1.0.46...

9.8CVSS7AI score0.00081EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/19 7:32 a.m.2 views

CVE-2025-64268

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through = 1.0.44...

7.5CVSS7AI score0.00043EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/18 9:30 a.m.1 views

EUVD-2025-204066

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through = 1.0.44...

7.5CVSS6.5AI score0.00043EPSS
Exploits0References2
NVD
NVD
added 2025/12/18 8:16 a.m.1 views

CVE-2025-64268

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through = 1.0.44...

7.5CVSS0.00043EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.1 views

CVE-2025-64268 WordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through = 1.0.44...

7.5CVSS6.6AI score0.00043EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/18 7:22 a.m.20 views

CVE-2025-64268 WordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerability

Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through = 1.0.44...

7.5CVSS0.00043EPSS
Exploits0References1
Rows per page
Query Builder