CVE-2026-100163 | LatePoint Appointment Booking Plugin – LatePoint Plugin up to 5.7.2 on WordPress OsCustomerHelper create_wp_user_for_customer customer/email improper authentication

October 14, 2026 Yanac

A vulnerability classified as critical was found in LatePoint Appointment Booking Plugin – LatePoint Plugin up to 5.7.2 on WordPress. Affected is the function OsCustomerHelper::create_wp_user_for_customer of the component OsCustomerHelper. Executing a manipulation of the argument customer/email can lead to improper authentication.

This vulnerability is registered as CVE-2026-100163. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More