Input validation vulnerability in LatePoint – Calendar Booking Plugin for Appointments and Events 5.1.93

A popular WordPress plugin called LatePoint, which is used for managing appointments and events, has a security vulnerability. This means that people who are not authenticated, or logged in, can access and run any PHP files on the server by using a specific parameter called ‘layout’. This can lead to unauthorized access, stealing of important information, or running malicious code if PHP files can be uploaded and included.