CVE-2026-84215
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
The Timetics plugin versions up to 1.0.61 contain an unauthenticated broken access control vulnerability. This allows unauthorized access to protected features.
Risk Assessment
The risk includes unauthorized access to data or administrative functions, potentially leading to confidentiality and integrity breaches.
Recommendation
It is recommended to update the Timetics plugin to the latest patched version immediately.
Other vulnerabilities in Timetics
See all- CVE-2026-116860Medium
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Timetics: from n/a through 1.0.65.
- CVE-2026-97304Medium
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a through 1.0.63.
- CVE-2026-57674High
The Timetics plugin version 1.0.58 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.
Original NVD description (English source)
Unauthenticated Broken Access Control in Timetics <= 1.0.61 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS