Arraytics Booktics vulnerabilities

Latest Arraytics Booktics CVEs

Newest publication first

1. CVE-2026-104674 WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability

   Published 2026-10-30

   Medium·CVSS 4.3 EPSS 0.25%

   Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31.

2. CVE-2026-62122 WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability

   Published 2026-10-30

   Medium·CVSS 5.3 EPSS 0.27%

   Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.31.

3. CVE-2026-112829 WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability

   Published 2026-10-20

   Medium·CVSS 5.3 EPSS 0.29%

   Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.30.

4. CVE-2026-109894 WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability

   Published 2026-10-18

   Critical·CVSS 9.3 EPSS 0.23%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics booktics allows SQL Injection.This issue affects Booktics: from n/a through 1.0.29.

5. CVE-2026-109895 WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability

   Published 2026-10-18

   High·CVSS 7.1 EPSS 0.18%

   Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics booktics allows DOM-Based XSS.This issue affects Booktics: from n/a through 1.0.29.

6. CVE-2026-107418 WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

   Published 2026-10-12

   Medium·CVSS 5.4 EPSS 0.17%

   Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28.

7. CVE-2026-108477 WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability

   Published 2026-10-12

   Medium·CVSS 5.3 EPSS 0.17%

   Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28.

8. CVE-2026-104390 WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability

   Published 2026-10-07

   Medium·CVSS 4.3 EPSS 0.16%

   Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.27.

9. CVE-2026-62135 WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability

   Published 2026-09-11

   Medium·CVSS 5.3 EPSS 0.29%

   Unauthenticated Broken Access Control in Booktics <= 1.0.24 versions.

10. CVE-2026-28002 WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability

    Published 2026-08-13

    High·CVSS 8.5 EPSS 0.36%

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22.

11. CVE-2026-57621 WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability

    Published 2026-07-02

    Critical·CVSS 9.8 EPSS 0.56%

    Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions.

12. CVE-2026-39585 WordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerability

    Published 2026-04-08

    Medium·CVSS 5.3 EPSS 0.20%

    Missing Authorization vulnerability in Arraytics Booktics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Booktics: from n/a through 1.0.16.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.