Timetics – Appointment Booking & Scheduling vulnerabilities

2 known vulnerabilities in Timetics – Appointment Booking & Scheduling from Arraytics. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Timetics – Appointment Booking & Scheduling: Authorization Bypass Through User-Controlled Key

  CVE-2024-9263Oct 17, 2024ArrayticsEPSS 1.14%

  The WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin plugin for WordPress is vulnerable to Account Takeover/Privilege Escalation via Insecure Direct Object Reference in all versions up to, and including, 1.0.25 via the save() d

• 7.3 High severity

  Timetics – Appointment Booking & Scheduling: Missing Authorization

  CVE-2024-1094Jun 14, 2024Arraytics

  The Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the make_staff() function in all versions up to, an