CVE-2026-111602

The LatePoint | Calendar & Scheduling WordPress plugin is vulnerable to Sensitive Information Exposure in versions up to and including 5.7.4 . The root cause is an ORM Operator Injection occurring via the params (customer[uuid]) parameter. This allows unauthenticated attackers to extract sensitiv...