CVE-2026-112829: WordPress Booktics plugin <= 1.0.30 - Broken Access Control vulnerability
Published Oct 20, 2026
·Updated
Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a through 1.0.30.
Affected Software
1 affected component
Arraytics Booktics<=1.0.30
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Booktics pluginto a version that resolves this vulnerability.Fixed in 1.0.31
Event History
Oct 20, 2026
CVE Published
via MITRE·03:11 PM
Data Sourced
via MITRE·03:11 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an authenticated WordPress account or user interaction?
No. The CVSS vector indicates that no privileges and no user interaction are required.
2
Can this issue be exploited remotely?
Yes. The CVSS vector lists network attack access with low attack complexity.
3
What is the expected security impact if exploitation succeeds?
The reported impact is limited to low confidentiality impact. No integrity or availability impact is indicated.