Lucene search

K
ArrayticsWp Timetics

5 matches found

CVE
CVE
added 2024/10/17 4:15 a.m.75 views

CVE-2024-9263

The WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin plugin for WordPress is vulnerable to Account Takeover/Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 1.0.25 via the save() due to missing validation on a user cont...

9.8CVSS9.6AI score0.00439EPSS
CVE
CVE
added 2024/06/14 5:15 a.m.46 views

CVE-2024-1094

The Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the make_staff() function in all versions up to, and including, 1.0.21. This makes it poss...

7.3CVSS7.1AI score0.0033EPSS
CVE
CVE
added 2025/03/27 11:15 a.m.42 views

CVE-2025-30828

Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Timetics: from n/a through 1.0.29.

5.3CVSS7AI score0.00042EPSS
CVE
CVE
added 2024/11/01 3:15 p.m.40 views

CVE-2024-43923

Missing Authorization vulnerability in Arraytics Timetics allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Timetics: from n/a through 1.0.23.

9.8CVSS6.4AI score0.00228EPSS
CVE
CVE
added 2024/11/01 3:15 p.m.34 views

CVE-2024-37427

Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.21.

5.3CVSS5.3AI score0.00088EPSS