{"id":"CVE-2026-112829","kind":"vulnerability","aliases":["CVE-2026-112829"],"related":[],"title":"Booktics WordPress plugin: missing authorization lets users reach restricted functions","description":"Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.30.","summary":"Booktics, a booking plugin by Arraytics, lacks an authorization check on some functionality, so access control is not enforced as intended. An attacker may be able to perform actions or read data their role should not allow.","severity":"medium","cvss":5.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["booktics","package","self-hosted","wordpress"],"not_affected_if":["patched-version","plugin-not-installed"],"how_to_check":"- Check the installed Booktics version and compare it with `1.0.30`\n- Look for the plugin in the WordPress plugins list or in the plugin directory under `wp-content/plugins/booktics`\n- unknown for which specific endpoints are affected","fix":"- Update Booktics to a version later than `1.0.30`, as published by the vendor\n- unknown whether a patched version is released yet","status":"open","published_at":"2026-10-20T16:17:03+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","triaged_at":"2026-10-25T04:24:43+00:00","updated_at":"2026-10-25T04:24:43+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-25T04:24:43Z","model":"claude-haiku-5-5","output":{"fix":"- Update Booktics to a version later than `1.0.30`, as published by the vendor\n- unknown whether a patched version is released yet","reach":"internet","title":"Booktics WordPress plugin: missing authorization lets users reach restricted functions","impact":"medium","summary":"Booktics, a booking plugin by Arraytics, lacks an authorization check on some functionality, so access control is not enforced as intended. An attacker may be able to perform actions or read data their role should not allow.","category":"package","nicknames":[],"who_cares":["wordpress","booktics","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Unauthorized users read or change booking data they should not reach","analyst_note":"Confirm the affected endpoints, required privilege level and the first fixed version from the NVD entry or vendor advisory.","how_to_check":"- Check the installed Booktics version and compare it with `1.0.30`\n- Look for the plugin in the WordPress plugins list or in the plugin directory under `wp-content/plugins/booktics`\n- unknown for which specific endpoints are affected","needs_analyst":true,"not_affected_if":["plugin-not-installed","patched-version"],"who_is_affected":"Sites running Booktics version 1.0.30 or earlier. The sources do not say which roles or endpoints are involved, so exposure depends on who can reach the affected functions on the site. unknown whether the plugin is also used outside WordPress.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000601,"input_tokens":3297,"output_tokens":543,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-112829':13A,16A '-2026':12A,15A '1.0.30':81C 'abl':48B 'access':37B,71C 'action':51B 'affect':76C 'allow':59B,67C 'arrayt':28B,64C 'attack':45B 'author':5A,31B,61C 'book':25B 'booktic':1A,17B,23B,65C,66C,77C 'check':32B 'configur':70C 'control':38B,72C 'cve':11A,14A 'data':54B 'enforc':41B 'exploit':68C 'function':10A,35B 'host':21B 'incorrect':69C 'intend':43B 'issu':75C 'lack':29B 'let':6A 'levels.this':74C 'may':46B 'miss':4A,60C 'n/a':79C 'packag':18B 'perform':50B 'plugin':3A,26B 'reach':8A 'read':53B 'restrict':9A 'role':56B 'secur':73C 'self':20B 'self-host':19B 'user':7A 'vulner':62C 'wordpress':2A,22B","nicknames":[],"mitigations":[],"who_affected":"Sites running Booktics version 1.0.30 or earlier. The sources do not say which roles or endpoints are involved, so exposure depends on who can reach the affected functions on the site. unknown whether the plugin is also used outside WordPress.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T16:17:03+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_by":"audit@patchstack.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-112829","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112829","severity":null,"published_at":"2026-10-20T16:17:03+00:00","modified_at":"2026-10-21T11:17:06+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}