Advisories · Technology

Arraytics Booktics.

Every CVE that names Arraytics Booktics among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-104674 CVE record

CVSS 4.3 Medium

WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability
- Arraytics Booktics
- Broken access control
Not analysed yet 30 Oct 2026
CVE-2026-62122 CVE record

CVSS 5.3 Medium

WordPress Booktics plugin <= 1.0.31 - Broken Access Control vulnerability
- Arraytics Booktics
- Broken access control
Not analysed yet 30 Oct 2026
CVE-2026-112829 CVE record

CVSS 5.3 Medium

WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability
- Arraytics Booktics
- Broken access control
Not analysed yet 20 Oct 2026
CVE-2026-109895 CVE record

CVSS 7.1 High

WordPress Booktics plugin <= 1.0.29 - Cross Site Scripting (XSS) vulnerability
- Arraytics Booktics
- Cross-site scripting (XSS)
Not analysed yet 18 Oct 2026
CVE-2026-109894 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability
- Arraytics Booktics
- SQL injection
Not analysed yet 18 Oct 2026
CVE-2026-107418 CVE record

CVSS 5.4 Medium

WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
- Arraytics Booktics
- Broken access control
Not analysed yet 12 Oct 2026
CVE-2026-108477 CVE record

CVSS 5.3 Medium

WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
- Arraytics Booktics
- Broken access control
Not analysed yet 12 Oct 2026
CVE-2026-104390 CVE record

CVSS 4.3 Medium

WordPress Booktics plugin <= 1.0.27 - Broken Access Control vulnerability
- Arraytics Booktics
- Broken access control
Not analysed yet 7 Oct 2026
CVE-2026-62135 CVE record

CVSS 5.3 Medium

WordPress Booktics plugin <= 1.0.24 - Broken Access Control vulnerability
- Arraytics Booktics
- Broken access control
Not analysed yet 11 Sept 2026
CVE-2026-28002 CVE record

CVSS 8.5 High

WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability
- Arraytics Booktics
- SQL injection
Not analysed yet 13 Aug 2026
CVE-2026-57621 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Booktics plugin <= 1.0.21 - PHP Object Injection vulnerability
- Arraytics Booktics
- Insecure deserialization
Not analysed yet 2 Jul 2026
CVE-2026-39585 CVE record

CVSS 5.3 Medium

WordPress Booktics plugin <= 1.0.16 - Broken Access Control vulnerability
- Arraytics Booktics
- Broken access control
Not analysed yet 8 Apr 2026