Booktics – Appointment Booking Calendar for Service Businesses

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Booktics – Appointment Booking Calendar for Service Businesses

Information

Software Type Plugin
Software Slug booktics (view on wordpress.org)
Software Status Active
Software Author arraytics
Software Website arraytics.com
Software Downloads 13,801
Software Active Installs 800
Software Record Last Updated October 11, 2026

8 Vulnerabilities

Submit a Vulnerability
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.27 - Missing Authorization
4.3
CVE-2026-104390
Oct 7, 2026
Researcher: Oly Hossen
Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization
5.3
CVE-2026-11446
Sep 10, 2026
Researcher: revblock
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.24 - Missing Authorization
5.3
CVE-2026-62135
Sep 10, 2026
Researcher: Supakiad S. (m3ez)
Booktics 1.0.22 - Authenticated (Subscriber+) SQL Injection
6.5
CVE-2026-28002
Aug 12, 2026
Researcher: Abdullah Kareem "cyberkareem"
Booktics <= 1.0.21 - Unauthenticated PHP Object Injection
8.1
CVE-2026-57621
Jun 29, 2026
Researcher: hhhai
Booktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpoints
5.3
CVE-2026-1919
Mar 9, 2026
Researcher: Kazuma Matsumoto
Booktics <= 1.0.16 - Missing Authorization to Addon Plugin Installation
5.3
CVE-2026-1920
Mar 9, 2026
Researcher: Kazuma Matsumoto
Booktics <= 1.0.16 - Missing Authorization
5.3
CVE-2026-39585
Feb 2, 2026
Researcher: Simone Maion
Title Status CVE ID CVSS Researchers Date
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.27 - Missing Authorization Patched CVE-2026-104390 4.3 Oly Hossen October 7, 2026
Booktics – Booking Calendar for Appointments and Service Businesses <= 1.0.23 - Missing Authorization Patched CVE-2026-11446 5.3 revblock September 10, 2026
Booktics – Appointment Booking Calendar for Service Businesses <= 1.0.24 - Missing Authorization Patched CVE-2026-62135 5.3 Supakiad S. (m3ez) September 10, 2026
Booktics 1.0.22 - Authenticated (Subscriber+) SQL Injection Patched CVE-2026-28002 6.5 Abdullah Kareem "cyberkareem" August 12, 2026
Booktics <= 1.0.21 - Unauthenticated PHP Object Injection Patched CVE-2026-57621 8.1 hhhai June 29, 2026
Booktics <= 1.0.16 - Missing Authorization to Get Items via REST API endpoints Patched CVE-2026-1919 5.3 Kazuma Matsumoto March 9, 2026
Booktics <= 1.0.16 - Missing Authorization to Addon Plugin Installation Patched CVE-2026-1920 5.3 Kazuma Matsumoto March 9, 2026
Booktics <= 1.0.16 - Missing Authorization Patched CVE-2026-39585 5.3 Simone Maion February 2, 2026

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation