CVE-2026-6741

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 5.4.1. This is due to a missing authorization check in the execute() method of the connect-customer-to-wp-user ability, which only requires the customer__edit capability granted to the latepoint_agent role by default, without verifying whether the target WordPress user ID belongs to a privileged account. This makes it possible for authenticated attackers with the latepoint_agent role to link any LatePoint customer record to an administrator's WordPress account and subsequently reset the administrator's password via the normal customer password-reset flow, resulting in full site takeover.

• CWE-269

• https://plugins.trac.wordpress.org/browser/latepoint/tags/5.4.1/lib/abilities/customers/connect-customer-to-wp-user.php
• https://plugins.trac.wordpress.org/browser/latepoint/tags/5.4.1/lib/helpers/roles_helper.php
• https://plugins.trac.wordpress.org/browser/latepoint/tags/5.4.1/lib/models/customer_model.php
• https://plugins.trac.wordpress.org/changeset/3514330/latepoint
• https://wordpress.org/plugins/latepoint/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/71e99412-031e-4f4a-9126-dd3a37975246?source=cve

Published

Apr 27, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-67356ArcadeDB before 26.7.3 binds the real LocalDatabase object i…8.8
• CVE-2026-67357ArcadeDB versions before 26.7.3 contain an information discl…7.7
• CVE-2026-6736An authentication bypass vulnerability was identified in Git…6.5
• CVE-2026-6737An Exposed IOCTL with Insufficient Access Control vulnerabil…2
• CVE-2026-6739Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.1…7.2
• CVE-2026-6740The Nexter Blocks – Gutenberg Blocks, Page Builder & AI Webs…6.4
• CVE-2026-6742The Advanced iFrame plugin for WordPress is vulnerable to St…6.4
• CVE-2026-67422pymdown-extensions is a collection of extensions for the Pyt…7.5
• CVE-2026-67424Flyto2 Core is an execution kernel for automation and AI-age…8.5
• CVE-2026-67425Flyto2 Core is an execution kernel for automation and AI-age…8.6
• CVE-2026-67426Flyto2 Core is an execution kernel for automation and AI-age…9.3
• CVE-2026-67427Flyto2 Core is an execution kernel for automation and AI-age…8.6