Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

arraytics — Vulnerabilities & Security Advisories 74

Browse all 74 CVE security advisories affecting arraytics. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Arraytics operates as a specialized provider of advanced threat detection and response solutions, primarily targeting industrial control systems and critical infrastructure environments. With thirty-eight Common Vulnerabilities and Exposures (CVEs) currently on record, the platform has historically exhibited significant security weaknesses, particularly in the areas of remote code execution and cross-site scripting. These flaws often stem from insufficient input validation and improper access controls, allowing attackers to escalate privileges or execute arbitrary commands within the managed network. While specific major public breaches remain limited in detailed reporting, the high volume of disclosed vulnerabilities indicates systemic issues in the software development lifecycle. The presence of these defects poses substantial risks to operational technology environments, where successful exploitation could lead to severe disruptions in industrial processes. Continuous patching and rigorous security audits are essential to mitigate these persistent exposure points.

CVE ID Title CVSS Severity Published
CVE-2026-109895 WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability — Booktics CWE-79 7.1 High 2026-10-18
CVE-2026-109894 WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability — Booktics CWE-89 9.3 Critical 2026-10-18
CVE-2026-110380 WordPress WP Event Solution plugin <= 4.1.26 - Broken Access Control vulnerability — WP Event Solution CWE-862 5.3 Medium 2026-10-16
CVE-2026-109898 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability — WP Event Solution CWE-862 5.3 Medium 2026-10-13
CVE-2026-107418 WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability — Booktics CWE-862 5.4 Medium 2026-10-12
CVE-2026-108477 WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability — Booktics CWE-862 5.3 Medium 2026-10-12
CVE-2026-104390 WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability — Booktics CWE-862 4.3 Medium 2026-10-07
CVE-2026-97300 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability — WP Event Solution CWE-799 6.5 Medium 2026-10-06
CVE-2026-97304 WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability — Timetics CWE-862 6.5 Medium 2026-10-05
CVE-2026-103684 WordPress WP Event Solution plugin <= 4.1.25 - Broken Access Control vulnerability — WP Event Solution CWE-862 5.3 Medium 2026-10-05
CVE-2026-105073 WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability — WP Event Solution CWE-497 5.3 Medium 2026-10-05
CVE-2026-11601 WPCafe <= 3.0.19 - Missing Authorization to Unauthenticated Arbitrary Email Notification Flow Read/Create/Update/Delete — WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System CWE-862 5.3 Medium 2026-10-03
CVE-2026-75028 WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting — WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System CWE-98 7.5 High 2026-10-03
CVE-2026-75983 Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter — Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce CWE-269 7.5 High 2026-09-15
CVE-2026-15402 Eventin <= 4.1.23 - Authenticated (Custom+) Stored Cross-Site Scripting via 'etn_shedule_objective' schedule_slot Parameter — Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce CWE-79 6.4 Medium 2026-09-15
CVE-2026-62135 WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability — Booktics CWE-862 5.3 Medium 2026-09-11
CVE-2026-11446 Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization — Booktics – Appointment Booking Calendar for Service Businesses CWE-862 5.3 Medium 2026-09-11
CVE-2026-11821 Eventin <= 4.1.17 - Missing Authorization to Authenticated (Subscriber+) Notification Flow Management via notification-flow REST API Endpoint — Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce CWE-862 5.4 Medium 2026-09-09
CVE-2026-15667 Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter — Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce CWE-98 7.5 High 2026-09-09
CVE-2026-15406 Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter — Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce CWE-98 7.5 High 2026-09-09
CVE-2026-12956 Eventin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation via 'status' Parameter — Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce CWE-862 5.3 Medium 2026-09-09
CVE-2026-84215 WordPress Timetics plugin <= 1.0.61 - Broken Access Control vulnerability — Timetics CWE-862 6.5 Medium 2026-09-03
CVE-2026-82223 WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability — WP Event SOlution CWE-862 6.5 Medium 2026-09-02
CVE-2026-28002 WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability — Booktics CWE-89 8.5 High 2026-08-13
CVE-2026-28174 WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability — WP Event SOlution CWE-201 6.5 Medium 2026-08-13
CVE-2026-28173 WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability — WP Event SOlution CWE-862 7.1 High 2026-08-13
CVE-2026-66451 WordPress WP Event SOlution plugin <= 4.1.9 - Broken Authentication vulnerability — WP Event SOlution CWE-288 6.5 Medium 2026-08-06
CVE-2026-13039 Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment Bypass via REST API — Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) CWE-862 5.3 Medium 2026-07-10
CVE-2026-12924 Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'etn_faq_content' Parameter — Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) CWE-79 6.4 Medium 2026-07-10
CVE-2026-11818 WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via REST API — WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System CWE-862 5.4 Medium 2026-07-10

This page lists every published CVE security advisory associated with arraytics. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.