agentprime: appointment-booking-plugin-latepoint-calendar-scheduling-for-wordpressEvery new CVE for appointment-booking-plugin-latepoint-calendar-scheduling-for-wordpress.https://agentprime.io/CVE-2026-118066: Appointment Booking Plugin <= 5.7.6 - Unauthenticated Authentication Bypass via Account Takeover via 'IS NOT NULL' Sentinel in 'password_reset_token' Parameterhttps://agentprime.io/advisories/CVE-2026-118066/https://agentprime.io/advisories/CVE-2026-118066/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 11:26:26 GMTCVEcriticalCVE-2026-119152: Appointment Booking Plugin <= 5.7.6 - Unauthenticated Stored Cross-Site Scripting via Customer Email Fieldhttps://agentprime.io/advisories/CVE-2026-119152/https://agentprime.io/advisories/CVE-2026-119152/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 07 Nov 2026 02:29:15 GMTCVECVE-2026-111602: Appointment Booking Plugin <= 5.7.4 - Unauthenticated Sensitive Information Disclosure via ORM Operator Injection in 'customer[uuid]' Parameterhttps://agentprime.io/advisories/CVE-2026-111602/https://agentprime.io/advisories/CVE-2026-111602/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 02:31:07 GMTCVECVE-2026-110653: Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counterhttps://agentprime.io/advisories/CVE-2026-110653/https://agentprime.io/advisories/CVE-2026-110653/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 17 Oct 2026 02:31:06 GMTCVEcriticalCVE-2026-103380: Appointment Booking Plugin <= 5.7.3 - Authenticated (Subscriber+) Sensitive Information Exposure in 'first_name' Parameter Template Re-expansionhttps://agentprime.io/advisories/CVE-2026-103380/https://agentprime.io/advisories/CVE-2026-103380/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 07:43:32 GMTCVECVE-2026-103366: Appointment Booking Plugin <= 5.7.3 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'booking[id]' and 'cart[id]' Parametershttps://agentprime.io/advisories/CVE-2026-103366/https://agentprime.io/advisories/CVE-2026-103366/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 07:43:31 GMTCVECVE-2026-100163: Appointment Booking Plugin <= 5.7.2 - Unauthenticated Authentication Bypass to Customer Account Takeover via Insufficient Verification in create_wp_user_for_customer() username_exists Fallbackhttps://agentprime.io/advisories/CVE-2026-100163/https://agentprime.io/advisories/CVE-2026-100163/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 07:43:31 GMTCVECVE-2026-96662: Appointment Booking Plugin <= 5.7.2 - Unauthenticated SQL Injection via 'booking[service_id]' Parameterhttps://agentprime.io/advisories/CVE-2026-96662/https://agentprime.io/advisories/CVE-2026-96662/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 07:41:43 GMTCVECVE-2026-104766: Appointment Booking Plugin <= 5.7.3 - Authenticated (Custom+) Privilege Escalation to 'settings[default_wp_role_for_customer]' Parameterhttps://agentprime.io/advisories/CVE-2026-104766/https://agentprime.io/advisories/CVE-2026-104766/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:30:57 GMTCVECVE-2026-91050: Appointment Booking Plugin <= 5.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Unauthorized Booking Creation and Sensitive Information Disclosure via 'params[presets][order_ite…https://agentprime.io/advisories/CVE-2026-91050/https://agentprime.io/advisories/CVE-2026-91050/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 05:30:55 GMTCVECVE-2026-17538: Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress <= 5.6.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Customer PII Modificationhttps://agentprime.io/advisories/CVE-2026-17538/https://agentprime.io/advisories/CVE-2026-17538/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 23:27:12 GMTCVECVE-2026-94432: Appointment Booking Plugin <= 5.7.1 - Insecure Direct Object Reference to Unauthenticated Unauthorized Transaction Intent Creation/Modification and Invoice Enumeration via 'invoice_id' Parameterhttps://agentprime.io/advisories/CVE-2026-94432/https://agentprime.io/advisories/CVE-2026-94432/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 07:39:29 GMTCVECVE-2026-92966: Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Fieldhttps://agentprime.io/advisories/CVE-2026-92966/https://agentprime.io/advisories/CVE-2026-92966/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 04:27:34 GMTCVEcriticalCVE-2026-13471: LatePoint <= 5.6.3 - Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Booking Deletion and Customer/Booking Data Disclosure via Abilities REST API (list-bookings, list-customers,…https://agentprime.io/advisories/CVE-2026-13471/https://agentprime.io/advisories/CVE-2026-13471/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 07:40:00 GMTCVECVE-2026-18441: LatePoint - Appointment Booking & Scheduling <= 5.6.9 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Disclosure via 'customer[id]' Parameterhttps://agentprime.io/advisories/CVE-2026-18441/https://agentprime.io/advisories/CVE-2026-18441/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 23:27:10 GMTCVECVE-2026-5391: LatePoint <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributeshttps://agentprime.io/advisories/CVE-2026-5391/https://agentprime.io/advisories/CVE-2026-5391/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 11:29:19 GMTCVE