Booktics

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerabilityCVE-2026-57621Arraytics · CVSS 9.8 · 0.6% likely

   CWE-502

2. WordPress Booktics plugin 1.0.22 - SQL Injection vulnerabilityCVE-2026-28002Arraytics · CVSS 8.5 · 0.4% likely

   CWE-89

3. WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerabilityCVE-2026-62135Arraytics · CVSS 5.3 · 0.3% likely

   CWE-862

4. WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerabilityCVE-2026-112829Arraytics · CVSS 5.3 · 0.3% likely

   CWE-862

5. WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerabilityCVE-2026-62122Arraytics · CVSS 5.3 · 0.3% likely

   CWE-862

6. WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerabilityCVE-2026-104674Arraytics · CVSS 4.3 · 0.3% likely

   CWE-862

7. WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerabilityCVE-2026-109894Arraytics · CVSS 9.3 · 0.2% likely

   CWE-89

8. WordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerabilityCVE-2026-39585Arraytics · CVSS 5.3 · 0.2% likely

   CWE-862

9. WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-109895Arraytics · CVSS 7.1 · 0.2% likely

   CWE-79

10. WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerabilityCVE-2026-108477Arraytics · CVSS 5.3 · 0.2% likely

    CWE-862

11. WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerabilityCVE-2026-107418Arraytics · CVSS 5.4 · 0.2% likely

    CWE-862

12. WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerabilityCVE-2026-104390Arraytics · CVSS 4.3 · 0.2% likely

    CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.