CVE-2026-15250

The CVE-2026-15250 entry concerns the WordPress Appointment Booking Plugin (LatePoint) prior to version 5.6.8. The vulnerability arises because unauthenticated users can set privileged booking fields through the public booking funnel, bypassing the site’s booking approval workflow by mass-assigni...