CVE-2026-84215

MediumCVSS 6.5

Published: 03/09/2026(UTC)Updated: 03/09/2026(UTC)Translated: 03/09/2026(UTC)NVD NIST

Summary

The Timetics plugin versions up to 1.0.61 contain an unauthenticated broken access control vulnerability. This allows unauthorized access to protected features.

Risk Assessment

The risk includes unauthorized access to data or administrative functions, potentially leading to confidentiality and integrity breaches.

Recommendation

It is recommended to update the Timetics plugin to the latest patched version immediately.

Other vulnerabilities in Timetics

CVE-2026-57674High
The Timetics plugin version 1.0.58 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.

Original NVD description (English source)

Unauthenticated Broken Access Control in Timetics <= 1.0.61 versions.