CVE-2026-111602 | LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress AJAX Endpoint steps__load_step customer[uuid] information disclosure

October 17, 2026 Yanac

A vulnerability, which was classified as problematic, was found in LatePoint Appointment Booking Plugin up to 5.7.4 on WordPress. Affected by this vulnerability is the function steps__load_step of the component AJAX Endpoint. The manipulation of the argument customer[uuid] results in information disclosure.

This vulnerability is reported as CVE-2026-111602. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More