CVE Explorer
CVE-2026-1566
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 5.2.7. This is due to the plugin allowing users with a LatePoint Agent role, who are creating new customers to set the 'wordpress_user_id' field. This makes it possible for authenticated attackers, with Agent-level access and above, to gain elevated privileges by linking a customer to the arbitrary user ID, includi
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"defaultStatus":"unaffected","product":"LatePoint – Calendar Booking Plugin for Appointments and Events","vendor":"latepoint","versions":[{"lessThanOrEqual":"5.2.7","status":"affected","version":"0","versionType":"semver"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:c03a4c44666d5f0ef17591cd145a97acba76006c1c391d58fac966010cf8bf92 · sha256:9b9ab29f6563e61b… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:c03a4c44666d5f0ef17591cd145a97acba76006c1c391d58fac966010cf8bf92 · sha256:9b9ab29f6563e61b… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-269","description":"CWE-269 Improper Privilege Management","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:c03a4c44666d5f0ef17591cd145a97acba76006c1c391d58fac966010cf8bf92 · sha256:9b9ab29f6563e61b… · /containers/cna/problemTypes/0/descriptions/0
Source references
2 source assertions{"url":"https://plugins.trac.wordpress.org/changeset/3463945/"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:c03a4c44666d5f0ef17591cd145a97acba76006c1c391d58fac966010cf8bf92 · sha256:9b9ab29f6563e61b… · /containers/cna/references/1
{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/c958880e-6068-4e7d-a780-1251f3ab9bf7?source=cve"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:c03a4c44666d5f0ef17591cd145a97acba76006c1c391d58fac966010cf8bf92 · sha256:9b9ab29f6563e61b… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.