Timetics – Appointment Booking & Scheduling

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.25 - Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Res…CVE-2024-9263arraytics · CVSS 9.8 · 1.1% likely

   CWE-639

2. Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling Plugin <= 1.0.21 - Missing Authorization to Limited Privilege EscalationCVE-2024-1094arraytics · CVSS 7.3 · 0.5% likely

   CWE-862

3. WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin <= 1.0.27 - Missing Authorization to Authenticated (Subscriber+) Arbitrary User DeletionCVE-2024-11275arraytics · CVSS 4.3 · 0.3% likely

   CWE-639

4. Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And ModificationCVE-2025-5919arraytics · CVSS 6.5 · 0.2% likely

   CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.