CVE-2026-110653

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress for WordPress is vulnerable to an unauthenticated authentication bypass in all versions up to and including 5.7.4 . The root cause is a race condition (TOCTOU) within the verifyOTP function due to a non-atomic read-m...