Vulnerabilidades do Arraytics Timetics – Appointment Booking & Scheduling
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Arraytics Timetics – Appointment Booking & Scheduling: 1 registro(s), com versões afetadas e correções.
CVE-2025-5919
Média · 6.5
CWE-862 06/01/2026
Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification
The Appointment Booking and Scheduling Calendar Plugin – WP Timetics plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missing capability check on the update and register_routes functions in all versions up to, and including, 1.0.36. This makes it possible for unauthenticated attackers to view and modify booking details.