Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling, CVE-2025-15473

CVE, Research URL: CVE-2025-15473
Home page URL: Security reports for Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling
Application: Timetics- AI-powered Appointment Booking with Visual Seat Plan and ultimate Calendar Scheduling
Published on: Mar 12, 2026
Research Description: The Timetics WordPress plugin before 1.0.52 does not have authorization in a REST endpoint, allowing unauthenticated users to arbitrarily change a booking's payment status and post status for the "timetics-booking" custom post type.
Affected versions: max 1.0.52.
Status: vulnerable