Vulnerabilidades em arraytics
48 resultadosAnálise Vexday
A Arraytics apresenta um perfil de risco moderado com 22 vulnerabilidades catalogadas, das quais apenas 1 é crítica e nenhuma está sob exploração ativa. A fraqueza dominante é autorização inadequada (CWE-862), indicando falhas no controle de acesso; embora 3 vulnerabilidades tenham sido publicadas nos últimos 90 dias, a ausência de atividade de ataque sugere que o risco imediato é contido, recomendando-se priorização das críticas e remediação das autorizações.
CVE-2025-30828MEDIUMWordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-40776HIGHWordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-67915HIGHWordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerabilityEPSS 0.4%CVE-2025-49869HIGHWordPress Eventin Plugin <= 4.0.31 - PHP Object Injection VulnerabilityEPSS 0.4%CVE-2024-6033MEDIUMEvent Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data ImportEPSS 0.4%CVE-2025-1766MEDIUMEvent Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status UpdateEPSS 0.3%CVE-2024-37427MEDIUMWordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-11275MEDIUMWP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User DeletionEPSS 0.3%CVE-2026-57621CRITICALWordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2024-5427MEDIUMWPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form ShortcodeEPSS 0.3%CVE-2025-14657HIGHEventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'EPSS 0.3%CVE-2025-64268HIGHWordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-27071CRITICALWordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-7813HIGHEvent Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request ForgeryEPSS 0.3%CVE-2026-1919MEDIUMBooktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpointsEPSS 0.3%CVE-2026-13039MEDIUMEventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST APIEPSS 0.3%CVE-2026-57622MEDIUMWordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-39432HIGHWordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-11818MEDIUMWPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST APIEPSS 0.2%CVE-2026-1920MEDIUMBooktics <= 1.0.16 - Missing Authorization to Addon Plugin InstallationEPSS 0.2%