Tag

Shortcode-Injection

1 brief RSS

Arbitrary Shortcode Execution in LatePoint WordPress Plugin

The LatePoint WordPress plugin is vulnerable to unauthenticated arbitrary shortcode execution due to improper input validation during the booking flow.

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress wordpress plugin-vulnerability shortcode-injection cve-2026-92966

2t 1c 1w ago