Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

arraytics — Vulnerabilities & Security Advisories 52

Browse all 52 CVE security advisories affecting arraytics. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Arraytics operates as a specialized provider of advanced threat detection and response solutions, primarily targeting industrial control systems and critical infrastructure environments. With thirty-eight Common Vulnerabilities and Exposures (CVEs) currently on record, the platform has historically exhibited significant security weaknesses, particularly in the areas of remote code execution and cross-site scripting. These flaws often stem from insufficient input validation and improper access controls, allowing attackers to escalate privileges or execute arbitrary commands within the managed network. While specific major public breaches remain limited in detailed reporting, the high volume of disclosed vulnerabilities indicates systemic issues in the software development lifecycle. The presence of these defects poses substantial risks to operational technology environments, where successful exploitation could lead to severe disruptions in industrial processes. Continuous patching and rigorous security audits are essential to mitigate these persistent exposure points.

CVE ID Title CVSS Severity Published
CVE-2026-82223 WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability — WP Event SOlution CWE-862 6.5 Medium 2026-09-02
CVE-2026-28002 WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability — Booktics CWE-89 8.5 High 2026-08-13
CVE-2026-28174 WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability — WP Event SOlution CWE-201 6.5 Medium 2026-08-13
CVE-2026-28173 WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability — WP Event SOlution CWE-862 7.1 High 2026-08-13
CVE-2026-66451 WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability — WP Event SOlution CWE-288 6.5 Medium 2026-08-06
CVE-2026-13039 Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API — Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) CWE-862 5.3 Medium 2026-07-10
CVE-2026-12924 Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter — Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) CWE-79 6.4 Medium 2026-07-10
CVE-2026-11818 WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API — WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System CWE-862 5.4 Medium 2026-07-10
CVE-2026-57674 WordPress Timetics plugin <= 1.0.58 - Cross Site Scripting (XSS) vulnerability — Timetics CWE-79 7.1 High 2026-07-02
CVE-2026-57621 WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability — Booktics CWE-502 9.8 Critical 2026-07-02
CVE-2026-57622 WordPress WPCafe plugin <= 3.0.14 - Broken Access Control vulnerability — WPCafe CWE-862 4.3 Medium 2026-06-26
CVE-2025-68045 WordPress WP Event SOlution plugin <= 4.1.12 - Broken Access Control vulnerability — WP Event SOlution CWE-862 7.5 High 2026-06-16
CVE-2026-40776 WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability — WP Event SOlution CWE-862 7.5 High 2026-06-15
CVE-2026-39432 WordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerability — Timetics CWE-862 8.2 High 2026-05-12
CVE-2026-4109 Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) <= 4.1.8 Missing Authorization to Authenticated (Subscriber+) Order Information Exposure — Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) CWE-862 4.3 Medium 2026-04-14
CVE-2026-39585 WordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerability — Booktics CWE-862 5.3 Medium 2026-04-08
CVE-2026-27071 WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability — WPCafe CWE-862 9.1 Critical 2026-03-25
CVE-2026-1919 Booktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpoints — Booktics – Booking Calendar for Appointments and Service Businesses CWE-306 5.3 Medium 2026-03-10
CVE-2026-1920 Booktics <= 1.0.16 - Missing Authorization to Addon Plugin Installation — Booktics – Booking Calendar for Appointments and Service Businesses CWE-306 5.3 Medium 2026-03-10
CVE-2025-68047 WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability — Eventin CWE-502 8.8 High 2026-01-22
CVE-2025-14657 Eventin – Event Manager, Event Booking, Calendar, Tickets and Registration Plugin (AI Powered) <= 4.0.51 - Missing Authorization to Unauthenticated Stored Cross-Site Scripting via 'post_settings' — Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) CWE-862 7.2 High 2026-01-09
CVE-2025-67915 WordPress Timetics plugin <= 1.0.46 - Broken Authentication vulnerability — Timetics CWE-288 8.8 High 2026-01-08
CVE-2025-5919 Appointment Booking and Scheduling Calendar Plugin – WP Timetics <= 1.0.36 - Missing Authorization to Unauthenticated Booking Details View And Modification — Timetics – Appointment Booking & Scheduling CWE-862 6.5 Medium 2026-01-06
CVE-2025-64268 WordPress Timetics plugin <= 1.0.44 - Broken Access Control vulnerability — Timetics CWE-862 7.5 High 2025-12-18
CVE-2025-7813 Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery — Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) CWE-918 7.2 High 2025-08-23
CVE-2025-49869 WordPress Eventin Plugin <= 4.0.31 - PHP Object Injection Vulnerability — Eventin CWE-502 8.8 High 2025-08-14
CVE-2025-4796 Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover — Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) CWE-639 8.8 High 2025-08-08
CVE-2025-49321 WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability — Eventin CWE-79 7.1 High 2025-06-27
CVE-2025-47539 WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability — Eventin CWE-266 9.8 Critical 2025-05-23
CVE-2025-47445 WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability — Eventin CWE-23 7.5 High 2025-05-14

This page lists every published CVE security advisory associated with arraytics. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.