{"items":[{"id":"CVE-2026-109994","published":"2026-11-06T09:38:13.839Z","updated":"2026-11-06T09:38:13.839Z","title":"Eventin <= 4.1.29 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'id' Parameter","severity":"MEDIUM","score":6.5,"vendor":"arraytics","product":"Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce","kev":false,"epss":0.00464,"kevAdded":null},{"id":"CVE-2026-104674","published":"2026-10-30T18:12:56.057Z","updated":"2026-10-30T18:49:58.474Z","title":"WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.0025,"kevAdded":null},{"id":"CVE-2026-62122","published":"2026-10-30T18:05:54.717Z","updated":"2026-10-30T18:49:58.921Z","title":"WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2026-116860","published":"2026-10-30T14:42:18.051Z","updated":"2026-10-30T15:07:31.474Z","title":"WordPress Timetics plugin <= 1.0.65 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00242,"kevAdded":null},{"id":"CVE-2026-112844","published":"2026-10-24T08:00:10.546Z","updated":"2026-10-24T14:46:57.569Z","title":"WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Arraytics","product":"WP Event Solution","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2026-112829","published":"2026-10-20T15:11:43.228Z","updated":"2026-10-21T10:35:08.582Z","title":"WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2026-109895","published":"2026-10-18T11:00:29.573Z","updated":"2026-10-18T11:42:55.835Z","title":"WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00175,"kevAdded":null},{"id":"CVE-2026-109894","published":"2026-10-18T11:00:29.562Z","updated":"2026-10-19T15:51:39.092Z","title":"WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability","severity":"CRITICAL","score":9.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00229,"kevAdded":null},{"id":"CVE-2026-110380","published":"2026-10-16T12:31:15.231Z","updated":"2026-10-16T14:59:31.070Z","title":"WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"WP Event Solution","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-109898","published":"2026-10-13T16:23:02.114Z","updated":"2026-10-15T16:43:51.594Z","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"WP Event Solution","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-107418","published":"2026-10-12T17:12:33.445Z","updated":"2026-10-12T22:54:00.660Z","title":"WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2026-108477","published":"2026-10-12T16:32:19.815Z","updated":"2026-10-12T22:54:01.160Z","title":"WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00171,"kevAdded":null},{"id":"CVE-2026-104390","published":"2026-10-07T09:17:31.432Z","updated":"2026-10-07T10:09:58.909Z","title":"WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2026-97300","published":"2026-10-06T05:14:51.890Z","updated":"2026-10-06T10:41:49.035Z","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Arraytics","product":"WP Event Solution","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2026-97304","published":"2026-10-05T18:08:35.952Z","updated":"2026-10-05T18:42:34.010Z","title":"WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00196,"kevAdded":null},{"id":"CVE-2026-103684","published":"2026-10-05T11:26:23.170Z","updated":"2026-10-05T14:55:00.213Z","title":"WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"WP Event Solution","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2026-105073","published":"2026-10-05T11:22:42.540Z","updated":"2026-10-05T14:48:32.613Z","title":"WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"WP Event Solution","kev":false,"epss":0.00197,"kevAdded":null},{"id":"CVE-2026-11601","published":"2026-10-03T06:38:25.636Z","updated":"2026-10-03T15:42:41.202Z","title":"WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete","severity":"MEDIUM","score":5.3,"vendor":"arraytics","product":"WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System","kev":false,"epss":0.00355,"kevAdded":null},{"id":"CVE-2026-75028","published":"2026-10-03T06:38:22.143Z","updated":"2026-10-03T15:42:42.516Z","title":"WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting","severity":"HIGH","score":7.5,"vendor":"arraytics","product":"WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System","kev":false,"epss":0.0068,"kevAdded":null},{"id":"CVE-2026-75983","published":"2026-09-15T06:07:31.947Z","updated":"2026-09-15T14:10:24.241Z","title":"Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter","severity":"HIGH","score":7.5,"vendor":"arraytics","product":"Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce","kev":false,"epss":0.00705,"kevAdded":null},{"id":"CVE-2026-15402","published":"2026-09-15T06:07:31.589Z","updated":"2026-09-16T18:59:04.907Z","title":"Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter","severity":"MEDIUM","score":6.4,"vendor":"arraytics","product":"Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce","kev":false,"epss":0.00435,"kevAdded":null},{"id":"CVE-2026-62135","published":"2026-09-11T18:12:11.688Z","updated":"2026-09-11T20:19:10.946Z","title":"WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2026-11446","published":"2026-09-11T03:39:38.143Z","updated":"2026-09-11T16:37:36.654Z","title":"Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization","severity":"MEDIUM","score":5.3,"vendor":"arraytics","product":"Booktics – Appointment Booking Calendar for Service Businesses","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2026-11821","published":"2026-09-09T04:28:34.581Z","updated":"2026-09-09T16:03:07.389Z","title":"Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint","severity":"MEDIUM","score":5.4,"vendor":"arraytics","product":"Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce","kev":false,"epss":0.00326,"kevAdded":null},{"id":"CVE-2026-15667","published":"2026-09-09T02:27:35.678Z","updated":"2026-09-09T15:01:58.232Z","title":"Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter","severity":"HIGH","score":7.5,"vendor":"arraytics","product":"Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce","kev":false,"epss":0.0096,"kevAdded":null},{"id":"CVE-2026-15406","published":"2026-09-09T02:27:35.346Z","updated":"2026-09-11T20:19:15.061Z","title":"Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter","severity":"HIGH","score":7.5,"vendor":"arraytics","product":"Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce","kev":false,"epss":0.01146,"kevAdded":null},{"id":"CVE-2026-12956","published":"2026-09-09T02:27:34.017Z","updated":"2026-09-09T13:55:02.316Z","title":"Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter","severity":"MEDIUM","score":5.3,"vendor":"arraytics","product":"Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce","kev":false,"epss":0.00413,"kevAdded":null},{"id":"CVE-2026-84215","published":"2026-09-03T16:31:41.541Z","updated":"2026-09-03T17:49:47.876Z","title":"WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00332,"kevAdded":null},{"id":"CVE-2026-82223","published":"2026-09-02T11:37:31.194Z","updated":"2026-09-02T16:00:29.434Z","title":"WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Arraytics","product":"WP Event SOlution","kev":false,"epss":0.00332,"kevAdded":null},{"id":"CVE-2026-28002","published":"2026-08-13T13:42:09.081Z","updated":"2026-08-13T15:33:53.641Z","title":"WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability","severity":"HIGH","score":8.5,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2026-28174","published":"2026-08-13T13:36:33.789Z","updated":"2026-08-13T15:18:37.853Z","title":"WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Arraytics","product":"WP Event SOlution","kev":false,"epss":0.00371,"kevAdded":null},{"id":"CVE-2026-28173","published":"2026-08-13T13:36:33.153Z","updated":"2026-08-13T15:48:23.293Z","title":"WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability","severity":"HIGH","score":7.1,"vendor":"Arraytics","product":"WP Event SOlution","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-66451","published":"2026-08-06T14:27:51.339Z","updated":"2026-08-06T19:22:10.763Z","title":"WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Arraytics","product":"WP Event SOlution","kev":false,"epss":0.00328,"kevAdded":null},{"id":"CVE-2026-13039","published":"2026-07-10T20:31:37.672Z","updated":"2026-07-13T14:40:09.826Z","title":"Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API","severity":"MEDIUM","score":5.3,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2026-12924","published":"2026-07-10T07:48:41.434Z","updated":"2026-07-10T14:41:37.142Z","title":"Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter","severity":"MEDIUM","score":6.4,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.00357,"kevAdded":null},{"id":"CVE-2026-11818","published":"2026-07-10T03:31:13.896Z","updated":"2026-07-10T14:25:01.305Z","title":"WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API","severity":"MEDIUM","score":5.4,"vendor":"arraytics","product":"WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System","kev":false,"epss":0.00412,"kevAdded":null},{"id":"CVE-2026-57674","published":"2026-07-02T11:15:33.276Z","updated":"2026-07-02T19:45:09.915Z","title":"WordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerability","severity":"HIGH","score":7.1,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2026-57621","published":"2026-07-02T11:15:24.897Z","updated":"2026-07-02T12:42:35.622Z","title":"WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00564,"kevAdded":null},{"id":"CVE-2026-57622","published":"2026-06-26T14:53:06.559Z","updated":"2026-06-26T17:42:46.942Z","title":"WordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Arraytics","product":"WPCafe","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2025-68045","published":"2026-06-16T09:00:29.079Z","updated":"2026-10-21T06:38:36.546Z","title":"WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Arraytics","product":"WP Event Solution","kev":false,"epss":0.00225,"kevAdded":null},{"id":"CVE-2026-40776","published":"2026-06-15T20:18:20.297Z","updated":"2026-06-16T17:11:14.673Z","title":"WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Arraytics","product":"WP Event SOlution","kev":false,"epss":0.00414,"kevAdded":null},{"id":"CVE-2026-39432","published":"2026-05-12T07:49:19.358Z","updated":"2026-05-12T12:43:40.710Z","title":"WordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerability","severity":"HIGH","score":8.2,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2026-4109","published":"2026-04-14T07:43:03.588Z","updated":"2026-04-14T13:00:42.566Z","title":"Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure","severity":"MEDIUM","score":4.3,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2026-39585","published":"2026-04-08T08:30:21.023Z","updated":"2026-05-12T07:50:49.191Z","title":"WordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Booktics","kev":false,"epss":0.00198,"kevAdded":null},{"id":"CVE-2026-27071","published":"2026-03-25T16:14:54.113Z","updated":"2026-04-29T09:51:57.242Z","title":"WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability","severity":"CRITICAL","score":9.1,"vendor":"Arraytics","product":"WPCafe","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2026-1919","published":"2026-03-10T02:21:49.636Z","updated":"2026-04-08T17:21:36.464Z","title":"Booktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpoints","severity":"MEDIUM","score":5.3,"vendor":"arraytics","product":"Booktics – Booking Calendar for Appointments and Service Businesses","kev":false,"epss":0.00297,"kevAdded":null},{"id":"CVE-2026-1920","published":"2026-03-10T02:21:49.040Z","updated":"2026-04-08T17:14:30.512Z","title":"Booktics <= 1.0.16 - Missing Authorization to Addon Plugin Installation","severity":"MEDIUM","score":5.3,"vendor":"arraytics","product":"Booktics – Booking Calendar for Appointments and Service Businesses","kev":false,"epss":0.00264,"kevAdded":null},{"id":"CVE-2025-68047","published":"2026-01-22T16:52:06.124Z","updated":"2026-04-28T19:56:58.706Z","title":"WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability","severity":"HIGH","score":8.8,"vendor":"Arraytics","product":"Eventin","kev":false,"epss":0.00569,"kevAdded":null},{"id":"CVE-2025-14657","published":"2026-01-09T07:22:12.728Z","updated":"2026-04-08T17:29:31.164Z","title":"Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings'","severity":"HIGH","score":7.2,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.00333,"kevAdded":null},{"id":"CVE-2025-67915","published":"2026-01-08T09:17:45.304Z","updated":"2026-04-28T16:14:23.250Z","title":"WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability","severity":"HIGH","score":8.8,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00425,"kevAdded":null},{"id":"CVE-2025-5919","published":"2026-01-06T08:21:49.906Z","updated":"2026-04-08T17:26:57.217Z","title":"Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification","severity":"MEDIUM","score":6.5,"vendor":"arraytics","product":"Timetics – Appointment Booking & Scheduling","kev":false,"epss":0.00244,"kevAdded":null},{"id":"CVE-2025-64268","published":"2025-12-18T07:22:14.683Z","updated":"2026-04-28T18:28:44.581Z","title":"WordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerability","severity":"HIGH","score":7.5,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2025-7813","published":"2025-08-23T05:48:19.990Z","updated":"2026-04-08T17:13:37.374Z","title":"Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery","severity":"HIGH","score":7.2,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2025-49869","published":"2025-08-14T10:34:07.565Z","updated":"2026-05-12T00:32:21.848Z","title":"WordPress Eventin Plugin <= 4.0.31 - PHP Object Injection Vulnerability","severity":"HIGH","score":8.8,"vendor":"Arraytics","product":"Eventin","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2025-4796","published":"2025-08-08T18:26:26.586Z","updated":"2026-04-08T17:11:41.513Z","title":"Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover","severity":"HIGH","score":8.8,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.00654,"kevAdded":null},{"id":"CVE-2025-49321","published":"2025-06-27T11:52:32.006Z","updated":"2026-04-28T16:13:00.966Z","title":"WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability","severity":"HIGH","score":7.1,"vendor":"Arraytics","product":"Eventin","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2025-47539","published":"2025-05-23T12:43:31.396Z","updated":"2026-04-28T16:12:44.335Z","title":"WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Arraytics","product":"Eventin","kev":false,"epss":0.25447,"kevAdded":null},{"id":"CVE-2025-47445","published":"2025-05-14T11:37:49.467Z","updated":"2026-05-12T00:16:18.055Z","title":"WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability","severity":"HIGH","score":7.5,"vendor":"Arraytics","product":"Eventin","kev":false,"epss":0.0516,"kevAdded":null},{"id":"CVE-2025-3419","published":"2025-05-08T05:22:51.039Z","updated":"2026-04-08T16:36:48.311Z","title":"Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read","severity":"HIGH","score":7.5,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.00725,"kevAdded":null},{"id":"CVE-2025-39452","published":"2025-04-17T15:15:42.576Z","updated":"2026-04-28T16:12:31.907Z","title":"WordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerability","severity":"HIGH","score":7.5,"vendor":"Arraytics","product":"WPCafe","kev":false,"epss":0.00801,"kevAdded":null},{"id":"CVE-2025-39584","published":"2025-04-16T12:44:22.763Z","updated":"2026-04-28T16:12:35.217Z","title":"WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability","severity":"HIGH","score":7.5,"vendor":"Arraytics","product":"Eventin","kev":false,"epss":0.00919,"kevAdded":null},{"id":"CVE-2025-30829","published":"2025-03-27T10:55:18.635Z","updated":"2026-04-28T16:11:58.403Z","title":"WordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerability","severity":"HIGH","score":7.5,"vendor":"Arraytics","product":"WPCafe","kev":false,"epss":0.01109,"kevAdded":null},{"id":"CVE-2025-30828","published":"2025-03-27T10:55:17.023Z","updated":"2026-04-28T16:11:58.667Z","title":"WordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00455,"kevAdded":null},{"id":"CVE-2025-1766","published":"2025-03-20T05:22:35.308Z","updated":"2026-04-08T17:32:40.671Z","title":"Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Missing Authorization to Unauthenticated Payment Status Update","severity":"MEDIUM","score":5.3,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2025-1770","published":"2025-03-20T05:22:34.878Z","updated":"2026-04-08T16:56:18.670Z","title":"Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.24 - Authenticated (Contributor+) Local File Inclusion","severity":"HIGH","score":8.8,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.00873,"kevAdded":null},{"id":"CVE-2025-26964","published":"2025-02-25T14:17:57.457Z","updated":"2026-04-28T16:11:44.838Z","title":"WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability","severity":"HIGH","score":7.5,"vendor":"Arraytics","product":"Eventin","kev":false,"epss":0.00758,"kevAdded":null},{"id":"CVE-2024-56213","published":"2024-12-31T10:02:21.132Z","updated":"2026-04-28T16:10:55.181Z","title":"WordPress Eventin plugin <= 4.0.7 - Contributor+ Limited Local File Inclusion vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Arraytics","product":"Eventin","kev":false,"epss":0.00574,"kevAdded":null},{"id":"CVE-2024-11275","published":"2024-12-13T08:24:52.066Z","updated":"2026-04-08T17:26:23.803Z","title":"WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletion","severity":"MEDIUM","score":4.3,"vendor":"arraytics","product":"Timetics – Appointment Booking & Scheduling","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2023-47805","published":"2024-12-09T11:30:44.255Z","updated":"2026-04-29T09:51:51.275Z","title":"WordPress WPCafe plugin <= 2.2.22 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"WPCafe","kev":false,"epss":0.00497,"kevAdded":null},{"id":"CVE-2023-49756","published":"2024-12-09T11:30:15.153Z","updated":"2026-05-11T22:20:29.585Z","title":"WordPress Eventin plugin <= 3.3.52 - Authenticated Notice Dismissal Vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Arraytics","product":"Eventin","kev":false,"epss":0.00591,"kevAdded":null},{"id":"CVE-2024-37427","published":"2024-11-01T14:18:23.641Z","updated":"2026-04-28T16:09:58.612Z","title":"WordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00335,"kevAdded":null},{"id":"CVE-2024-43923","published":"2024-11-01T14:17:21.209Z","updated":"2026-04-28T16:10:13.609Z","title":"WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Arraytics","product":"Timetics","kev":false,"epss":0.00527,"kevAdded":null},{"id":"CVE-2024-9263","published":"2024-10-17T03:32:49.162Z","updated":"2026-04-08T17:01:13.486Z","title":"WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover","severity":"CRITICAL","score":9.8,"vendor":"arraytics","product":"Timetics – Appointment Booking & Scheduling","kev":false,"epss":0.01138,"kevAdded":null},{"id":"CVE-2024-7149","published":"2024-09-27T13:52:55.422Z","updated":"2026-04-08T17:01:18.970Z","title":"Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.8 - Authenticated (Contributor+) Local File Inclusion","severity":"HIGH","score":8.8,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.01025,"kevAdded":null},{"id":"CVE-2024-6033","published":"2024-07-17T06:45:07.709Z","updated":"2026-04-08T16:37:19.652Z","title":"Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.4 - Missing Authorization to Authenticated (Contributor+) Event Data Import","severity":"MEDIUM","score":4.3,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.00362,"kevAdded":null},{"id":"CVE-2024-5431","published":"2024-06-25T05:41:46.543Z","updated":"2026-04-08T16:55:36.466Z","title":"WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.25 - Authenticated (Contributor+) File inclusion via Shortcode","severity":"HIGH","score":8.8,"vendor":"arraytics","product":"WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System","kev":false,"epss":0.00593,"kevAdded":null},{"id":"CVE-2024-1094","published":"2024-06-14T04:36:54.514Z","updated":"2026-04-08T17:01:37.011Z","title":"Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin <= 1.0.21 - Missing Authorization to Limited Privilege Escalation","severity":"HIGH","score":7.3,"vendor":"arraytics","product":"Timetics – Appointment Booking & Scheduling","kev":false,"epss":0.00542,"kevAdded":null},{"id":"CVE-2024-5427","published":"2024-05-31T06:40:54.597Z","updated":"2026-04-08T16:45:29.397Z","title":"WPCafe – Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce <= 2.2.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via Reservation Form Shortcode","severity":"MEDIUM","score":6.4,"vendor":"arraytics","product":"WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2024-1855","published":"2024-05-23T01:56:18.284Z","updated":"2026-04-08T16:56:23.517Z","title":"WPCafe <= 2.2.23 - Unauthenticated Blind Server-Side Request Forgery","severity":"MEDIUM","score":5.3,"vendor":"arraytics","product":"WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System","kev":false,"epss":0.00436,"kevAdded":null},{"id":"CVE-2024-1122","published":"2024-02-09T04:31:53.959Z","updated":"2026-04-08T16:35:10.035Z","title":"Event Manager, Events Calendar, Events Tickets for WooCommerce – Eventin <= 3.3.50 - Missing Authorization to Unauthenticated Events Export","severity":"MEDIUM","score":5.3,"vendor":"arraytics","product":"Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)","kev":false,"epss":0.00471,"kevAdded":null}]}