Skip to content
Threat Feed
Subscribe

Product

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress (<= 5.7.6)

1 brief RSS
critical advisory

LatePoint Appointment Booking: Authentication bypass and account takeover (CVE-2026-118066)

The LatePoint Appointment Booking plugin for WordPress is vulnerable to authentication bypass and account takeover due to improper SQL query construction.

Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
1c