PULSE
EN
FEED
ransomsilentransomgroup reclama a K.r.. ...s · Not Foundransombraincipher reclama a novagroupgbc.com · GB · Otherransombraincipher reclama a oflaherty-law.com · IE · Professional Servicesransombraincipher reclama a clinicaromero.com · AR · Healthcareransombraincipher reclama a sodali.com · US · Professional Servicesransombraincipher reclama a srsnodgrass.com · US · Professional Servicesransombraincipher reclama a prosomnus.com · US · Healthcareransombraincipher reclama a olyortho.com · US · Healthcareransombraincipher reclama a mvjllp.com · Not Foundransomaurora reclama a Allmand-Smith Limited · GB · Manufacturingransomn0n reclama a Hanjin Information Systems & Telecommunication Co., Ltd. · KR · Technologyransominterlock reclama a Coastal Alabama Community College · US · Educationransomsilentransomgroup reclama a Porter Hedges LLP · US · Professional Servicesransomhelix reclama a Westrock Coffee · US · Retail & E-Commerceransomsilentransomgroup reclama a K.r.. ...s · Not Foundransombraincipher reclama a novagroupgbc.com · GB · Otherransombraincipher reclama a oflaherty-law.com · IE · Professional Servicesransombraincipher reclama a clinicaromero.com · AR · Healthcareransombraincipher reclama a sodali.com · US · Professional Servicesransombraincipher reclama a srsnodgrass.com · US · Professional Servicesransombraincipher reclama a prosomnus.com · US · Healthcareransombraincipher reclama a olyortho.com · US · Healthcareransombraincipher reclama a mvjllp.com · Not Foundransomaurora reclama a Allmand-Smith Limited · GB · Manufacturingransomn0n reclama a Hanjin Information Systems & Telecommunication Co., Ltd. · KR · Technologyransominterlock reclama a Coastal Alabama Community College · US · Educationransomsilentransomgroup reclama a Porter Hedges LLP · US · Professional Servicesransomhelix reclama a Westrock Coffee · US · Retail & E-Commerce
← Todos los CVEs
CVE Watch21 oct 2026

CVE-2026-105256

The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking ag

CVSS

5.3

Medio

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 21 oct 2026 · Última mod.: 21 oct 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking against the amounts the service and site actually allow, allowing an unauthenticated visitor to make the amount due resolve to zero and obtain a confirmed appointment and a recorded order without completing any payment.

Referencias oficiales
CVEs relacionados

Sin CVEs relacionados por CWE o producto.