CVE-2025-7052

The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.94. This is due to missing nonce validation on the change_password() function of its customer_cabinet__change_password AJAX route. The plugin hooks this endpoint via wp_ajax and wp_ajax_nopriv but does not verify a nonce or user capability before resetting the user’s password. This makes it possible for unauthenticated attackers who trick a logged-in customer (or, with “WP users as customers” enabled, an administrator) into visiting a malicious link to take over their account.

• CWE-352

• https://plugins.trac.wordpress.org/browser/latepoint/tags/5.1.93/latepoint.php
• https://plugins.trac.wordpress.org/browser/latepoint/tags/5.1.93/lib/controllers/customer_cabinet_controller.php#L403
• https://plugins.trac.wordpress.org/changeset/3366851/latepoint/tags/5.2.0/lib/controllers/customer_cabinet_controller.php
• https://wordpress.org/plugins/latepoint/#developers
• https://www.wordfence.com/threat-intel/vulnerabilities/id/df8a8ce0-7258-40ae-bf73-f8c6185fdd16?source=cve

Published

Sep 30, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-7046The Portfolio for Elementor & Image Gallery | PowerFolio plu…5.4
• CVE-2025-7047Missing Authorization vulnerability in Utarit Informatics Se…5.4
• CVE-2025-7048On affected platforms running Arista EOS with MACsec configu…5.3
• CVE-2025-7049The WPGYM - Wordpress Gym Management System plugin for WordP…8.8
• CVE-2025-7050The Use-your-Drive | Google Drive plugin for WordPress plugi…7.2
• CVE-2025-7051On N-central, it is possible for any authenticated user to r…8.3
• CVE-2025-7053A vulnerability was found in Cockpit up to 2.11.3. It has be…6.1
• CVE-2025-7054Cloudflare quiche was discovered to be vulnerable to an infi…6.5
• CVE-2025-70545A stored cross-site scripting (XSS) vulnerability exists in …6.1
• CVE-2025-70559pdfminer.six before 20251230 contains an insecure deserializ…6.5
• CVE-2025-7056Improper Neutralization of Input During Web Page Generation …6.3
• CVE-2025-70560Boltz 2.0.0 contains an insecure deserialization vulnerabili…8.4