CVE Intelligence

Arraytics Timetics – Appointment Booking & Scheduling vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Arraytics Timetics – Appointment Booking & Scheduling: 1 record(s), with affected versions and fixes.

CVE-2025-5919 Medium · 6.5 CWE-862 Jan 6, 2026
Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification
The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the update and register_routes functions in all versions up to, and including, 1.0.36. This makes it possible for unauthenticated attackers to view and modify booking details.