Timetics – Appointment Booking Calendar & Scheduling

Уязвимости

• CVE-2024-43923без авторизации≤ 1.0.23

  WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability

  Критич. 9.8

• CVE-2024-9263без авторизации≤ 1.0.25

  WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User

  Критич. 9.8

• CVE-2025-67915нужен вход≤ 1.0.46

  WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability

  Высокий 8.8

• CVE-2026-39432без авторизации≤ 1.0.53

  WordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerability

  Высокий 8.2

• CVE-2025-64268без авторизации≤ 1.0.44

  WordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2024-1094без авторизации≤ 1.0.21

  Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin <= 1.0.21 - Missing Authorization to Limited Privilege Es

  Высокий 7.3

• CVE-2026-57674без авторизации · нужен клик≤ 1.0.58

  WordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-84215без авторизации≤ 1.0.61

  WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerability

  Средний 6.5

• CVE-2025-5919без авторизации≤ 1.0.36

  Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification

  Средний 6.5

• CVE-2025-30828без авторизации≤ 1.0.29

  WordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2024-37427без авторизации≤ 1.0.21

  WordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2024-11275подписчик+≤ 1.0.27

  WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Use

  Средний 4.3