CVE-2026-97304: WordPress Timetics plugin <= 1.0.63 - Broken Access Control vulnerability
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.63.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Timetics pluginto a version that resolves this vulnerability.Fixed in 1.0.64
Event History
Frequently Asked Questions
Which Timetics installations are affected?
Timetics versions through 1.0.63 are affected. The available information does not identify a lower affected version, so versions listed as n/a through 1.0.63 are in scope.
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction required.
What impact can exploitation have?
The reported impact is limited to integrity and availability effects; confidentiality impact is listed as none. The severity is medium with a CVSS score of 6.5.