Vendor

    Arraytics

    80 known vulnerabilities in products by Arraytics, 0 of them actively exploited (CISA KEV).

    Key figures

    80

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Arraytics
    CriticalCVE-2025-47539

    WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability

    also in 1 other product

    		9.8
    CriticalCVE-2025-47445

    WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability

    also in 1 other product

    		7.5
    HighCVE-2026-15406

    Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter

    		7.5
    HighCVE-2026-15667

    Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter

    		7.5
    CriticalCVE-2024-9263

    Arraytics Timetics: Authorization Bypass Through User-Controlled Key

    		9.8
    HighCVE-2026-75028

    PHP Remote File Inclusion (CVE-2026-75028)

    		7.5
    HighCVE-2026-75983

    Improper Privilege Management (CVE-2026-75983)

    		7.5
    CriticalCVE-2026-57621

    WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability

    		9.8
    HighCVE-2024-7149

    Themewinter Eventin: Path Traversal

    also in 1 other product

    		8.8
    HighCVE-2025-30829

    WordPress WPCafe plugin <= 2.2.31 - Local File Inclusion vulnerability

    		7.5
    HighCVE-2025-1770

    Themewinter Eventin: Path Traversal

    also in 1 other product

    		8.8
    CriticalCVE-2026-109894

    WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability

    		9.3
    HighCVE-2025-68047

    WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability

    		8.8
    HighCVE-2025-4796

    Themewinter Eventin: Authorization Bypass Through User-Controlled Key

    also in 1 other product

    		8.8
    HighCVE-2025-39584

    WordPress Eventin plugin <= 4.0.25 - Local File Inclusion Vulnerability

    also in 1 other product

    		7.5
    HighCVE-2026-28002

    WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability

    		8.5
    HighCVE-2025-39452

    WordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerability

    		7.5
    HighCVE-2025-26964

    WordPress Eventin plugin <= 4.0.20 - Local File Inclusion vulnerability

    also in 1 other product

    		7.5
    HighCVE-2025-3419

    Themewinter Eventin: External Control of File Name or Path

    also in 1 other product

    		7.5
    MediumCVE-2026-15402

    Cross-site Scripting (CVE-2026-15402)

    		6.4
    HighCVE-2024-5431

    Themewinter WPCafe: PHP Remote File Inclusion

    also in 1 other product

    		8.8
    HighCVE-2025-67915

    WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability

    		8.8
    HighCVE-2026-40776

    WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability

    		7.5
    HighCVE-2026-112844

    WordPress WP Event Solution plugin <= 4.1.26 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-109895

    WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability

    		7.1

    All vulnerabilities in search

    Products

    Products by Arraytics
    Arraytics Booktics120
    Eventin – Event Calendar, Event Registration, Tickets & Booking (ai Powered)120
    Wp Event Solution120
    Arraytics Timetics100
    Arraytics Eventin90
    Eventin – Event Calendar, Tickets, Registration, Booking & Woocommerce70
    Wpcafe – Restaurant Menu, Online Food Ordering & Table Booking System60
    Arraytics WPCafe50
    Timetics – Appointment Booking & Scheduling40