https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-28T17:45:36.664270+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-105257 CVE-2026-105257 — LatePoint < 5.7.5 - Agent+ Customer PII Disclosure via IDOR 2026-10-28T17:45:36.666343+00:00

Affected: Unknown Appointment Booking Plugin

The Appointment Booking Plugin WordPress plugin before 5.7.5 does not verify that an authenticated agent-level user is assigned to a customer before returning or searching that customer's record, allowing any agent to read and enumerate the personal information of every customer on the site, including those managed by other agents.