{"schema_version":1,"title":"Arraytics WP Event Solution vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in Arraytics WP Event Solution: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-112844, was published on 24 October 2026. 3 vulnerabilities in the last four weeks, level on the four before (3).","url":"https://junglewise.ai/threats/technologies/wp-event-solution","json_url":"https://junglewise.ai/threats/technologies/wp-event-solution.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/wp-event-solution","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":2,"all_time":8,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":2,"last_90_days":7,"last_365_days":8},"latest":[{"cve":"CVE-2026-112844","cvss":7.1,"slug":"cve-2026-112844-improper-neutralization-of-input-during-web-page-generation","title":"Arraytics WP Event Solution stored cross-site scripting","severity":"high","exploited":false,"published_at":"2026-10-24T08:16:51.16+00:00","url":"https://junglewise.ai/threats/cve-2026-112844-improper-neutralization-of-input-during-web-page-generation"},{"cve":"CVE-2026-110380","cvss":5.3,"slug":"cve-2026-110380-missing-authorization-vulnerability-in-arraytics-wp-event","title":"Arraytics WP Event Solution broken access control","severity":"medium","exploited":false,"published_at":"2026-10-16T13:16:54.893+00:00","url":"https://junglewise.ai/threats/cve-2026-110380-missing-authorization-vulnerability-in-arraytics-wp-event"},{"cve":"CVE-2026-109898","cvss":5.3,"epss":0.0018,"slug":"cve-2026-109898-missing-authorization-vulnerability-in-arraytics-wp-event","title":"Arraytics WP Event Solution broken access control","severity":"medium","exploited":false,"published_at":"2026-10-13T17:17:32.317+00:00","url":"https://junglewise.ai/threats/cve-2026-109898-missing-authorization-vulnerability-in-arraytics-wp-event"},{"cve":"CVE-2026-97300","cvss":6.5,"slug":"cve-2026-97300-unauthenticated-broken-access-control-in-wp-event-solution-4-1-25","title":"WP Event Solution broken access control","severity":"medium","exploited":false,"published_at":"2026-10-06T06:17:02.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97300-unauthenticated-broken-access-control-in-wp-event-solution-4-1-25"},{"cve":"CVE-2026-105073","cvss":5.3,"slug":"cve-2026-105073-exposure-of-sensitive-system-information-to-an-unauthorized","title":"Arraytics WP Event Solution sensitive data exposure","severity":"medium","exploited":false,"published_at":"2026-10-05T12:17:09.04+00:00","url":"https://junglewise.ai/threats/cve-2026-105073-exposure-of-sensitive-system-information-to-an-unauthorized"},{"cve":"CVE-2026-103684","cvss":5.3,"slug":"cve-2026-103684-missing-authorization-vulnerability-in-arraytics-wp-event","title":"Arraytics WP Event Solution authorization bypass in access control","severity":"medium","exploited":false,"published_at":"2026-10-05T12:17:07.67+00:00","url":"https://junglewise.ai/threats/cve-2026-103684-missing-authorization-vulnerability-in-arraytics-wp-event"},{"cve":"CVE-2026-82223","cvss":6.5,"epss":0.0033,"slug":"cve-2026-82223-wp-event-solution-broken-access-control","title":"WP Event Solution broken access control","severity":"medium","exploited":false,"published_at":"2026-09-02T12:17:13.657+00:00","url":"https://junglewise.ai/threats/cve-2026-82223-wp-event-solution-broken-access-control"},{"cve":"CVE-2025-68045","cvss":7.5,"slug":"cve-2025-68045-arraytics-wp-event-solution-broken-access-control","title":"Arraytics WP Event SOlution broken access control","severity":"high","exploited":false,"published_at":"2026-06-16T10:16:25.657+00:00","url":"https://junglewise.ai/threats/cve-2025-68045-arraytics-wp-event-solution-broken-access-control"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Arraytics Booktics","slug":"booktics","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/booktics"},{"name":"Arraytics Timetics","slug":"timetics","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/timetics"}],"technology":{"hub":true,"name":"Arraytics WP Event Solution","slug":"wp-event-solution","vendor":{"hub":true,"name":"Arraytics","slug":"arraytics","url":"https://junglewise.ai/threats/vendors/arraytics"},"aliases":[],"category":"WordPress Plugin","homepage":"https://wordpress.org/plugins/wp-event-solution/","repo_url":"https://github.com/arraytics/wp-event-solution","description":"A WordPress plugin designed to manage events, ticketing, and attendee registrations.","url":"https://junglewise.ai/threats/technologies/wp-event-solution"},"most_severe":[{"cve":"CVE-2025-68045","cvss":7.5,"slug":"cve-2025-68045-arraytics-wp-event-solution-broken-access-control","title":"Arraytics WP Event SOlution broken access control","severity":"high","exploited":false,"published_at":"2026-06-16T10:16:25.657+00:00","url":"https://junglewise.ai/threats/cve-2025-68045-arraytics-wp-event-solution-broken-access-control"},{"cve":"CVE-2026-112844","cvss":7.1,"slug":"cve-2026-112844-improper-neutralization-of-input-during-web-page-generation","title":"Arraytics WP Event Solution stored cross-site scripting","severity":"high","exploited":false,"published_at":"2026-10-24T08:16:51.16+00:00","url":"https://junglewise.ai/threats/cve-2026-112844-improper-neutralization-of-input-during-web-page-generation"},{"cve":"CVE-2026-82223","cvss":6.5,"epss":0.0033,"slug":"cve-2026-82223-wp-event-solution-broken-access-control","title":"WP Event Solution broken access control","severity":"medium","exploited":false,"published_at":"2026-09-02T12:17:13.657+00:00","url":"https://junglewise.ai/threats/cve-2026-82223-wp-event-solution-broken-access-control"},{"cve":"CVE-2026-97300","cvss":6.5,"slug":"cve-2026-97300-unauthenticated-broken-access-control-in-wp-event-solution-4-1-25","title":"WP Event Solution broken access control","severity":"medium","exploited":false,"published_at":"2026-10-06T06:17:02.11+00:00","url":"https://junglewise.ai/threats/cve-2026-97300-unauthenticated-broken-access-control-in-wp-event-solution-4-1-25"},{"cve":"CVE-2026-109898","cvss":5.3,"epss":0.0018,"slug":"cve-2026-109898-missing-authorization-vulnerability-in-arraytics-wp-event","title":"Arraytics WP Event Solution broken access control","severity":"medium","exploited":false,"published_at":"2026-10-13T17:17:32.317+00:00","url":"https://junglewise.ai/threats/cve-2026-109898-missing-authorization-vulnerability-in-arraytics-wp-event"},{"cve":"CVE-2026-110380","cvss":5.3,"slug":"cve-2026-110380-missing-authorization-vulnerability-in-arraytics-wp-event","title":"Arraytics WP Event Solution broken access control","severity":"medium","exploited":false,"published_at":"2026-10-16T13:16:54.893+00:00","url":"https://junglewise.ai/threats/cve-2026-110380-missing-authorization-vulnerability-in-arraytics-wp-event"},{"cve":"CVE-2026-105073","cvss":5.3,"slug":"cve-2026-105073-exposure-of-sensitive-system-information-to-an-unauthorized","title":"Arraytics WP Event Solution sensitive data exposure","severity":"medium","exploited":false,"published_at":"2026-10-05T12:17:09.04+00:00","url":"https://junglewise.ai/threats/cve-2026-105073-exposure-of-sensitive-system-information-to-an-unauthorized"},{"cve":"CVE-2026-103684","cvss":5.3,"slug":"cve-2026-103684-missing-authorization-vulnerability-in-arraytics-wp-event","title":"Arraytics WP Event Solution authorization bypass in access control","severity":"medium","exploited":false,"published_at":"2026-10-05T12:17:07.67+00:00","url":"https://junglewise.ai/threats/cve-2026-103684-missing-authorization-vulnerability-in-arraytics-wp-event"}],"generated_at":"2026-11-13T03:07:00.155039+00:00"}