Live › vulnerability › CVE-2026-112829
Go to dashboardBooktics, a booking plugin by Arraytics, lacks an authorization check on some functionality, so access control is not enforced as intended. An attacker may be able to perform actions or read data their role should not allow.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running Booktics version 1.0.30 or earlier. The sources do not say which roles or endpoints are involved, so exposure depends on who can reach the affected functions on the site. unknown whether the plugin is also used outside WordPress.
No product ranges from the sources yet.
1.0.30wp-content/plugins/booktics1.0.30, as published by the vendorEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.30.
This page as .md · .json · in your agent: get_signal("CVE-2026-112829")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.