WordPress plugin
Timetics – Appointment Booking Calendar & Scheduling security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 16 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High2
- Medium13
- Low0
All Timetics – Appointment Booking Calendar & Scheduling vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization ≤1.0.65Update to 1.0.66 | CVE-2026-116860 | |
| Medium5.3 | Missing Authorization ≤1.0.63Update to 1.0.64 | CVE-2026-97304 | |
| Medium5.3 | Missing Authorization ≤1.0.61Update to 1.0.62 | CVE-2026-84215 | |
| Medium4.3 | Authenticated (Staff+) Insecure Direct Object Reference <1.0.62Update to 1.0.62 | CVE-2026-14326 | |
| Medium5.3 | Missing Authorization to Unauthenticated Booking Approval ≤1.0.56Update to 1.0.57 | CVE-2026-14322 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting ≤1.0.58Update to 1.0.59 | CVE-2026-57674 | |
| Medium5.3 | Missing Authorization ≤1.0.53Update to 1.0.54 | CVE-2026-39432 | |
| Medium5.3 | Missing Authorization <1.0.52Update to 1.0.52 | CVE-2025-15473 | |
| Medium6.5 | Missing Authorization to Unauthenticated Booking Details View And Modification ≤1.0.36Update to 1.0.37 | CVE-2025-5919 | |
| Medium5.3 | Incorrect Authorization to Authenticated (Timetics Customer+) User Creation ≤1.0.46Update to 1.0.48 | CVE-2025-67915 | |
| Medium5.3 | Missing Authorization ≤1.0.44Update to 1.0.45 | CVE-2025-64268 | |
| Medium5.3 | Missing Authorization ≤1.0.29Update to 1.0.30 | CVE-2025-30828 | |
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletion ≤1.0.27Update to 1.0.28 | CVE-2024-11275 | |
| Critical9.8 | Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover ≤1.0.25Update to 1.0.26 | CVE-2024-9263 | |
| Medium5.3 | Authorization Bypass ≤1.0.23Update to 1.0.24 | CVE-2024-43923 | |
| High7.3 | Missing Authorization to Limited Privilege Escalation ≤1.0.21Update to 1.0.22 | CVE-2024-1094 |
- Medium5.3Missing Authorization
≤1.0.65Update to 1.0.66
- Medium5.3Missing Authorization
≤1.0.63Update to 1.0.64
- Medium5.3Missing Authorization
≤1.0.61Update to 1.0.62
- Medium4.3Authenticated (Staff+) Insecure Direct Object Reference
<1.0.62Update to 1.0.62
- Medium5.3Missing Authorization to Unauthenticated Booking Approval
≤1.0.56Update to 1.0.57
- High7.2Unauthenticated Stored Cross-Site Scripting
≤1.0.58Update to 1.0.59
- Medium5.3Missing Authorization
≤1.0.53Update to 1.0.54
- Medium5.3Missing Authorization
<1.0.52Update to 1.0.52
- Medium6.5Missing Authorization to Unauthenticated Booking Details View And Modification
≤1.0.36Update to 1.0.37
- Medium5.3Incorrect Authorization to Authenticated (Timetics Customer+) User Creation
≤1.0.46Update to 1.0.48
- Medium5.3Missing Authorization
≤1.0.44Update to 1.0.45
- Medium5.3Missing Authorization
≤1.0.29Update to 1.0.30
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Arbitrary User Deletion
≤1.0.27Update to 1.0.28
- Critical9.8Insecure Direct Object Reference to Unauthenticated Arbitrary User Password/Email Reset/Account Takeover
≤1.0.25Update to 1.0.26
- Medium5.3Authorization Bypass
≤1.0.23Update to 1.0.24
- High7.3Missing Authorization to Limited Privilege Escalation
≤1.0.21Update to 1.0.22
Timetics – Appointment Booking Calendar & Scheduling: common questions
Does Timetics – Appointment Booking Calendar & Scheduling have known vulnerabilities?
Yes. VulnCrest Radar lists 16 known vulnerabilities in Timetics – Appointment Booking Calendar & Scheduling: 1 critical, 2 high, 13 medium. None are known to affect version null.
How do I check which version of Timetics – Appointment Booking Calendar & Scheduling I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Timetics – Appointment Booking Calendar & Scheduling vulnerability?
CVE-2026-116860, published Oct 30, 2026: Timetics – Appointment Booking Calendar & Scheduling <= 1.0.65 - Missing Authorization. Severity: Medium (CVSS 5.3).
Is any Timetics – Appointment Booking Calendar & Scheduling vulnerability listed in CISA KEV?
No. None of the known Timetics – Appointment Booking Calendar & Scheduling vulnerabilities is currently listed in the CISA KEV catalog.