PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-112829 Arraytics CVE debrief

The CVE-2026-112829 vulnerability affects the WordPress Booktics plugin, versions up to and including 1.0.30, due to a broken access control issue. This medium-severity vulnerability, with a CVSS score of 5.3, could potentially allow unauthorized access to certain functionality. Defenders should verify the plugin version, monitor activity, and review access configurations to mitigate potential risks. The vulnerability is related to missing authorization, which could be exploited due to incorrectly configured access control security levels. It is essential for those with relevant roles to evaluate and mitigate the risk. Verification of plugin version and potential update to a secure

Vendor
Arraytics
Product
Booktics
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-20
Original CVE updated
2026-10-21
Advisory published
2026-10-20
Advisory updated
2026-10-21

Who should care

Defenders responsible for WordPress installations with the Booktics plugin should assess their exposure and verify the version of the plugin in use. This vulnerability could potentially allow unauthorized access to certain functionality, making it important for those with relevant roles to evaluate and mitigate the risk.

Why it matters

CVE-2026-112829 is a medium-severity vulnerability in the WordPress Booktics plugin that could allow unauthorized access due to broken access control. Defenders should verify the plugin version, monitor activity, and review access configurations to mitigate potential risks.

  • Verification of plugin version and potential update to a secure version is required.
  • Monitoring for unusual activity related to the plugin's functionality may be necessary.
  • Review of access control configurations for the plugin is recommended.

Technical summary

The WordPress Booktics plugin, versions up to and including 1.0.30, is affected by a broken access control vulnerability. This issue, tracked as CVE-2026-112829, has a CVSS score of 5.3, indicating medium severity. The vulnerability is related to missing authorization, which could be exploited due to incorrectly configured access control security levels.

Defensive priority

Defenders should prioritize verifying the version of the Booktics plugin in use and ensuring it is updated to a version beyond 1.0.30 if possible. Additionally, monitoring for unusual activity related to the plugin's functionality may be warranted.

Recommended defensive actions

  • Verify the version of the Booktics plugin in use and update to a version beyond 1.0.30 if possible.
  • Monitor for unusual activity related to the plugin's functionality.
  • Review access control configurations for the plugin to ensure they are properly set.

Evidence notes

The CVE record and source item provide details about the vulnerability in the WordPress Booktics plugin. The information indicates a missing authorization issue that could be exploited due to incorrectly configured access control security levels.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-112829 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-112829

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-112829 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-112829

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.