Input validation vulnerability in LatePoint – Calendar Booking Plugin for Appointments and Events 5.2.5

A popular plugin called LatePoint, which helps with scheduling appointments and events on WordPress, has a security issue called Cross-Site Request Forgery. This means that anyone can make changes to the plugin without proper authorization, as the function responsible for checking permissions does not also check for a specific security code. This could allow someone to trick a website administrator into clicking a link that grants them access to do multiple administrative tasks.