Medium
CVE-2026-97304
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filters
Medium
CVE-2026-84215
Timetics – Appointment Booking Calendar & Scheduling <= 1.0.61 - Missing Authorization
Medium
CVE-2026-14326
Timetics < 1.0.62 - Authenticated (Staff+) Insecure Direct Object Reference
Medium
CVE-2026-14322
Timetics <= 1.0.56 - Missing Authorization to Unauthenticated Booking Approval
High
CVE-2026-57674
Timetics – Appointment Booking Calendar & Scheduling System <= 1.0.58 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-39432
Timetics – Appointment Booking & Scheduling <= 1.0.53 - Missing Authorization
Medium
CVE-2025-15473
Timetics – Appointment Booking Calendar & Scheduling System < 1.0.52 - Missing Authorization
Medium
CVE-2025-5919
Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification
Medium
CVE-2025-67915
Timetics <= 1.0.46 - Incorrect Authorization to Authenticated (Timetics Customer+) User Creation
Medium
CVE-2025-64268
Timetics <= 1.0.44 - Missing Authorization
Medium
CVE-2025-30828
Timetics <= 1.0.29 - Missing Authorization
Medium
CVE-2024-11275
WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletion
Critical
CVE-2024-9263
WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover
Medium
CVE-2024-43923
Timetics <= 1.0.23 - Authorization Bypass
High
CVE-2024-1094
Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin <= 1.0.21 - Missing Authorization to Limited Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.