CVE-2026-107418: WordPress Booktics plugin <= 1.0.28 - Broken Access Control vulnerability
Published Oct 12, 2026
·Updated
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.28.
Affected Software
1 affected component
Arraytics Booktics<=1.0.28
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
wordpress/bookticsto a version that resolves this vulnerability.Fixed in 1.0.29
Event History
Oct 12, 2026
CVE Published
via MITRE·05:12 PM
Data Sourced
via MITRE·05:12 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The vulnerability requires low-privileged access. It is remotely exploitable and does not require user interaction.
2
What security impact is indicated?
Successful exploitation may affect confidentiality and integrity at a low level. No availability impact is indicated.
3
Which Booktics versions are affected?
Booktics versions through 1.0.28 are affected. The provided information does not identify a fixed version.