arraytics

Security Risk Profile

/100

high

Security Risk Score

Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from November 1, 2024 to present

Total CVEs

Critical+High

Exploited

Unpatched

Threat Assessment

Avg CVSS

7.8

Base severity

Avg EPSS

Exploit probability

Unpatched

Critical/High

Risk Level

62/100

high

Severity Distribution

Critical

High

Medium

Low

Exploit Likelihood

>50% chance

20-50%

5-20%

<5%

Age Distribution

Common Weaknesses (CWE)

XSS

Most Affected Products

1. Arraytics Eventin3

2. Arraytics Timetics (WordPress plugin)2

3. Arraytics WPCafe2

4. WordPress Eventin1

5. Themewinter Eventin Wordpress1

Recent Vulnerabilities

See more →

CVE-2026-39432

CVSS 8.2high

WordPress Timetics plugin <= 1.0.53 - Broken Access Control vulnerability

5/12/2026

CVE-2026-27071

CVSS 9.1critical

WordPress WPCafe plugin <= 3.0.7 - Broken Access Control vulnerability

3/25/2026🔧 No Patch

CVE-2025-68047

CVSS 8.8high

WordPress Eventin plugin <= 4.1.3 - PHP Object Injection vulnerability

1/22/2026🔧 No Patch

CVE-2025-49869

CVSS 8.8high

WordPress Eventin Plugin <= 4.0.31 - PHP Object Injection Vulnerability

8/14/2025

CVE-2025-49321

CVSS 7.1high

WordPress Eventin plugin <= 4.0.28 - Cross Site Scripting (XSS) Vulnerability

6/27/2025

CVE-2025-39452

CVSS 7.5EPSS 0%high

WordPress WPCafe plugin <= 2.2.32 - Local File Inclusion vulnerability

4/17/2025

CVE-2025-30828

CVSS 5.3EPSS 0%medium

WordPress Timetics plugin <= 1.0.29 - Broken Access Control vulnerability

3/27/2025🔧 No Patch

CVE-2024-37427

CVSS 5.3medium

WordPress Timetics plugin <= 1.0.21 - Broken Access Control vulnerability

11/1/2024

CVE-2024-43923

CVSS 9.8critical

WordPress Timetics plugin <= 1.0.23 - Broken Access Control vulnerability