← العودة للجدول
CVE-2026-111602
CVE-2026-111602 — The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for Wor
📅 2026-10-17
🟢 Low 🔥 No NVD Exploit WordPress CVSS 3.7

📋 الوصف الكامل

The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.7.4 via the 'params (customer[uuid])' parameter. This makes it possible for unauthenticated attackers to extract the first name, last name, email address, phone number, and notes of every custom

💻 الأنظمة المتأثرة

WordPress

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2026-111602

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v5.7.4

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←