CVE-2026-104766 | LatePoint Appointment Booking Plugin up to 5.7.3 on WordPress Settings Update update settings privileges management

October 10, 2026 Yanac

A vulnerability classified as critical has been found in LatePoint Appointment Booking Plugin up to 5.7.3 on WordPress. Affected by this issue is the function OsSettingsController::update of the component Settings Update. This manipulation of the argument Settings causes improper privilege management.

This vulnerability is registered as CVE-2026-104766. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More