MEDIUM 5.3 NVD

CVE-2026-105256

The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking against the amounts th

The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking against the amounts the service and site actually allow, allowing an unauthenticated visitor to make the amount due resolve to zero and obtain a confirmed appointment and a recorded order without completing any payment.

References

https://wpscan.com/vulnerability/53a81b39-e86b-4b73-8b4f-64746684055d/

Published: 2026-10-21 · Source: NVD · Feed updated: 2026-10-21

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-10-21 via NVD.

vulnfeed aggregates 18720 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.