Access violation vulnerability in LatePoint – Calendar Booking Plugin for Appointments and Events 5.2.6

The LatePoint plugin for WordPress, which helps with scheduling appointments and events, has a security vulnerability that could allow unauthorized access to data. This is because the load_step() function does not have a proper check for user permissions. As a result, attackers who are not logged in could potentially see personal information such as customer names, email addresses, phone numbers, appointment times, and service details.