CVE-2026-110653 | LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress verifyOTP toctou

October 17, 2026 Yanac

A vulnerability, which was classified as critical, has been found in LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress. Affected is the function verifyOTP. The manipulation leads to time-of-check time-of-use.

This vulnerability is documented as CVE-2026-110653. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More