CVE-2026-110653: Critical Authentication Bypass Vulnerability in LatePoint Appointment Booking Plugin
A critical vulnerability (CVE-2026-110653, CVSS score of 9.1) has been discovered in the LatePoint Appointment Booking Plugin for WordPress. This vulnerability allows unauthenticated attackers to bypass authentication via a race condition, potentially leading to full account compromise. The vulnerability affects all versions up to and including 5.7.4 of the plugin. Immediate patching is recommended to prevent potential exploitation.