CVE-2026-97304
MediumCVSS 6.5Summary
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.63.
Risk Assessment
The risk is the possibility of unauthorized access to time management functions or data, which could lead to privacy breaches or data integrity issues.
Recommendation
It is recommended to update the Timetics plugin to a patched version and review permission configurations.
Other vulnerabilities in Timetics
See all- CVE-2026-84215Medium
The Timetics plugin versions up to 1.0.61 contain an unauthenticated broken access control vulnerability. This allows unauthorized access to protected features.
- CVE-2026-57674High
The Timetics plugin version 1.0.58 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.
Original NVD description (English source)
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.63.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS