Vulnerabilities in Arraytics

48 results
Vexday analysis

A Arraytics apresenta 25 vulnerabilidades catalogadas, com 3 classificadas como críticas, mas nenhuma sob ataque ativo no momento. A fraqueza dominante (CWE-862 - falha de autorização) sugere problemas estruturais no controle de acesso. O ritmo de publicação de 6 CVEs nos últimos 90 dias indica atividade contínua de descoberta, recomendando monitoramento próximo.

CVE-2026-66451MEDIUMWordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerabilityEPSS 0.2%CVE-2025-68045HIGHWordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-49321HIGHWordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-5919MEDIUMAppointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And ModificationEPSS 0.2%CVE-2026-12924MEDIUMEventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' ParameterEPSS 0.2%CVE-2026-39585MEDIUMWordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-57674HIGHWordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-4109MEDIUMEventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information ExposureEPSS 0.2%