CVE-2026-116860
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Timetics: from n/a through 1.0.65.
Risk Assessment
Improper access control may allow unauthorized users to perform operations reserved for higher privileges, potentially leading to modification of booking data or plugin configuration.
Recommendation
Upgrade the Timetics plugin beyond 1.0.65 and verify WordPress role permission configuration.
Other vulnerabilities in Timetics
See all- CVE-2026-97304Medium
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.63.
- CVE-2026-84215Medium
The Timetics plugin versions up to 1.0.61 contain an unauthenticated broken access control vulnerability. This allows unauthorized access to protected features.
- CVE-2026-57674High
The Timetics plugin version 1.0.58 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.
Original NVD description (English source)
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.65.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS