CVE-2026-92966 | LatePoint Appointment Booking Plugin LatePoint Plugin up to 5.7.0 on WordPress Shortcode render_customer_dashboard code injection (EUVD-2026-90479)

October 1, 2026 Yanac

A vulnerability described as critical has been identified in LatePoint Appointment Booking Plugin LatePoint Plugin up to 5.7.0 on WordPress. This affects the function render_customer_dashboard of the component Shortcode Handler. Executing a manipulation can lead to code injection.

This vulnerability is registered as CVE-2026-92966. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More