CVE-2026-17538

The LatePoint - Appointment Booking & Reservation plugin for WordPress (versions

WordPress Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin <= 5.6.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Customer PII Modification vulnerability

Authenticated Subscriber+ Insecure Direct Object Reference to Arbitrary Customer PII Modification vulnerability discovered by owlmind in WordPress Plugin LatePoint versions = 5.6.9...

WordPress Newsletter plugin < 9.3.8 - Unauthenticated Subscriber PII Disclosure and Modification vulnerability

Unauthenticated Subscriber PII Disclosure and Modification vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Newsletter versions 9.3.8...