EUVD-2026-76202
GHSA-mf65-6r53-94v7
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Network-reachable unauthenticated endpoint with no user interaction; integrity-only impact limited to booking data modification, no confidentiality or availability consequence.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
Lifecycle Timeline
3DescriptionCVE.org
Unauthenticated Broken Access Control in Booktics <= 1.0.24 versions.
AnalysisAI
Broken access control in the Booktics WordPress plugin (by Arraytics) through version 1.0.24 permits unauthenticated remote attackers to perform restricted write operations without any authentication. The CVSS vector (PR:N, I:L) confirms the flaw allows unauthorized integrity-impacting actions - such as modifying booking data or plugin state - accessible directly over the network. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special conditions are required beyond network access to a WordPress site running Booktics version 1.0.24 or earlier - the CVSS vector PR:N/AC:L/UI:N confirms unauthenticated exploitation over the network against default plugin configurations. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | CVSS 5.3 Medium reflects a realistic assessment: the attack is trivially launched over the network with no credentials (AV:N/AC:L/PR:N/UI:N), but impact is limited to low integrity modification (I:L) with no confidentiality or availability consequence (C:N/A:N, S:U). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update the Booktics plugin to a version beyond 1.0.24 once released by Arraytics - consult the WordPress plugin repository (wordpress.org/plugins/booktics) and the Patchstack advisory for the confirmed patched release version, as an exact fix version was not provided in available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated PHP Object Injection in the Booktics WordPress plugin (by Arraytics) affects all versions up to and incl
Blind SQL injection in the Booktics WordPress plugin (all versions through 1.0.22) enables authenticated low-privileged
Missing authorization in Arraytics Booktics WordPress plugin through version 1.0.16 allows unauthenticated remote attack
Same weakness CWE-862 – Missing Authorization
View allShare
External POC / Exploit Code
Leaving vuln.today