{
 "id": "WPSEC-2026-2338",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2338/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2338/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2338/index.md",
 "title": "LatePoint <= 5.7.6 - Authenticated (Agent+) Account Takeover of Subscriber-Level Users via 'wordpress_user_id' Parameter",
 "description": "The LatePoint plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 5.7.6, due to the customer create and update handlers and the order editor accepting the 'wordpress_user_id' and 'password' fields from any LatePoint backend user. This makes it possible for authenticated attackers, with LatePoint Agent-level access and above, to link a customer record they control to an existing subscriber- or customer-level WordPress account and set that account's password through the customer password reset, on sites with the 'Use WordPress users as customers' option enabled.",
 "plugin": {
  "slug": "latepoint",
  "name": "LatePoint",
  "full_name": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress",
  "wordpress_org": "https://wordpress.org/plugins/latepoint/",
  "advisories_url": "https://wpsec.com/vuln/plugin/latepoint/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/latepoint"
 },
 "type": "PRIV",
 "cwe": [
  "CWE-269"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 4.2,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "5.7.7",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 5.7.7"
  ]
 },
 "introduced_in": null,
 "fixed_in": "5.7.7",
 "remediation": "Update to 5.7.7 or later.",
 "fix_released": "2026-11-02T09:27:32+00:00",
 "published": "2026-11-03T14:48:33+00:00",
 "updated": "2026-11-03T13:39:22.868373+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2338/",
  "https://plugins.svn.wordpress.org/latepoint/tags/5.7.7/",
  "https://wordpress.org/plugins/latepoint/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/latepoint",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-11-03"
 }
}