CVE-2026-96662

{
  "etk_id": "ETK-2026-2979",
  "cve_id": "CVE-2026-96662",
  "display_id": "CVE-2026-96662",
  "ghsa_id": "GHSA-mwwp-rchw-pr78",
  "euvd_id": "EUVD-2026-96276",
  "status": "published",
  "anchor_state": "anchored",
  "title": "SQL injection in LatePoint WordPress booking plugin",
  "summary": "LatePoint booking plugin versions through 5.7.2 are affected by an SQL injection flaw. An unauthenticated remote attacker may retrieve sensitive information from the WordPress database when the vulnerable booking functionality is reachable.",
  "mitigation": "Disable the affected plugin or restrict public access to its booking functionality until an updated release is available. No fixed version is recorded in the supplied advisory data.",
  "vendor": "LatePoint",
  "product": "LatePoint",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 5.7.2"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.5,
  "cvss_src": "other",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "upstream",
  "exploit": false,
  "pipeline_minutes": 0.010723716666666668,
  "t0_at": "2026-10-10T07:41:43.527000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-29T15:03:49.809884+00:00",
      "days": 19.30701716300926,
      "is_lower_bound": false,
      "measured_at": "2026-10-10T07:41:43.527000+00:00",
      "url": null
    },
    "kev": {
      "at": "2026-10-29T00:00:00+00:00",
      "days": 19,
      "is_lower_bound": false,
      "measured_at": "2026-10-10T07:41:43.527000+00:00",
      "precision": "day",
      "url": "https://vulncheck.com/cve/CVE-2026-96662"
    },
    "trigger_signal": {
      "at": "2026-10-29T00:00:00+00:00",
      "days": 18.67935732638889,
      "is_lower_bound": false,
      "measured_at": "2026-10-10T07:41:43.527000+00:00",
      "url": "https://vulncheck.com/cve/CVE-2026-96662"
    }
  }
}