CVE-2026-91050 | LatePoint Appointment Booking Plugin up to 5.7.2 on WordPress Bundle Scheduling is_bundle_scheduling order_item_id authorization

October 10, 2026 Yanac

A vulnerability was found in LatePoint Appointment Booking Plugin up to 5.7.2 on WordPress. It has been classified as critical. Affected is the function is_bundle_scheduling of the component Bundle Scheduling. Performing a manipulation of the argument order_item_id results in authorization bypass.

This vulnerability is known as CVE-2026-91050. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More