{"id":"CVE-2026-96662","published":"2026-10-10T08:17:08.033","lastModified":"2026-10-13T13:29:12.567","description":"The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[service_id]' Parameter in all versions up to, and including, 5.7.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-89"],"vendors":[],"products":[],"references":[{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.1/latepoint.php#L1072","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.1/lib/controllers/steps_controller.php#L22","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.1/lib/controllers/steps_controller.php#L356","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.1/lib/helpers/connector_helper.php#L212","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.1/lib/helpers/steps_helper.php#L1231","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.1/lib/helpers/steps_helper.php#L1825","tags":[]},{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.1/lib/models/model.php#L403","tags":[]},{"url":"https://plugins.trac.wordpress.org/changeset?reponame=&old=3718438%40latepoint&new=3718438%40latepoint","tags":[]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/18c1a5a0-dee0-45ee-9e8b-0937b392eccd?source=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The LatePoint WordPress plugin contains a SQL injection vulnerability in the booking[service_id] parameter that allows unauthenticated attackers to inject malicious SQL queries and extract sensitive database information. This represents a significant security risk as it can lead to data exposure without requiring any authentication.","exploitability":"Exploitation is relatively straightforward as attackers need only send a specially crafted request to the booking endpoint with a malicious service_id parameter, with no authentication required.","blast_radius":"If exploited, this vulnerability could expose sensitive customer booking data, user information, and potentially other database contents to unauthenticated attackers across all affected WordPress installations.","remediation":"Upgrade to version 5.7.3 or later which contains the SQL injection fix for the booking[service_id] parameter.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["sql-injection","wordpress","web"],"model":"garnet-coder","analyzedAt":"2026-10-17T08:59:33.284Z"}}