Arraytics Booktics – Booking Calendar For Appointments And Service Businesses vulnerabilities

2 vulnerabilities

Known vulnerabilities in Arraytics Booktics – Booking Calendar For Appointments And Service Businesses, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2026-1920arrayticsbooktics – booking calendar for appointments and service businesses+1
EPSS score
0.24%
The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'Extension_Controller::update_item_permissions_check' function in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to install addon plugins.5.3CVE-2026-1919arrayticsbooktics – booking calendar for appointments and service businesses+1
EPSS score
0.27%
The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple REST API endpoints in all versions up to, and including, 1.0.16. This makes it possible for unauthenticated attackers to query sensitive data.