{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/appointment-booking-plugin--latepoint--calendar--scheduling-for-wordpress--5.7.6/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:latepoint:appointment_booking_plugin_latepoint_calendar_scheduling_for_wordpress:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.1,"id":"CVE-2026-118066"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Appointment Booking Plugin – LatePoint | Calendar \u0026 Scheduling for WordPress (\u003c= 5.7.6)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["LatePoint"],"content_html":"\u003cp\u003eThe Appointment Booking Plugin - LatePoint | Calendar \u0026amp; Scheduling for WordPress is vulnerable to Authentication Bypass via Account Takeover in all versions up to, and including, 5.7.6. The flaw exists in \u003ccode\u003eOsModel::build_conditions_query()\u003c/code\u003e in \u003ccode\u003elib/models/model.php\u003c/code\u003e, where SQL WHERE-clause values are concatenated without proper parameter binding. An unauthenticated attacker can exploit this by sending \u003ccode\u003eIS NOT NULL\u003c/code\u003e to public AJAX routes to enumerate customer PII via \u003ccode\u003esteps__start_from_order_intent\u003c/code\u003e or overwrite passwords via \u003ccode\u003ecustomer_cabinet__change_password\u003c/code\u003e. If the \u003ccode\u003ewp_users_as_customers\u003c/code\u003e option is enabled, this allows takeover of linked WordPress subscriber or customer-role accounts.\u003c/p\u003e\n","date_modified":"2026-11-07T14:44:07Z","date_published":"2026-11-07T14:44:07Z","id":"https://feed.craftedsignal.io/briefs/2026-11-latepoint-auth-bypass/","summary":"The LatePoint Appointment Booking plugin for WordPress is vulnerable to authentication bypass and account takeover due to improper SQL query construction.","title":"LatePoint Appointment Booking: Authentication bypass and account takeover (CVE-2026-118066)","url":"https://feed.craftedsignal.io/briefs/2026-11-latepoint-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Appointment Booking Plugin – LatePoint | Calendar \u0026 Scheduling for WordPress (\u003c= 5.7.6)","version":"https://jsonfeed.org/version/1.1"}