← العودة للجدول
CVE-2026-110653
CVE-2026-110653 — The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for Wor
📅 2026-10-17
🔴 Critical 🔥 No NVD Vulnerability WordPress CVSS 9.1

📋 الوصف الكامل

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in all versions up to, and including, 5.7.4. This is due to a non-atomic read-modify-write on the OTP verification attempts counter in the `verifyOTP` function: the counter is incremented using a stale in-memory value with no conditio

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-110653

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v5.7.4

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←