CVE-2026-7652 — The LatePoint plugin for WordPress is vulnerable to Account

title: CVE-2026-7652 - LatePoint Plugin Unauthenticated Email Overwrite
id: scw-2026-05-09-ai-1
status: experimental
level: critical
description: |
  Detects the specific AJAX action used by the LatePoint plugin to save booking data. This action, when exploited in conjunction with the described vulnerability, allows unauthenticated attackers to overwrite customer email addresses, leading to account takeover. This rule specifically targets the vulnerable function call within the plugin's unauthenticated guest booking flow.
author: SCW Feed Engine (AI-generated)
date: 2026-05-09
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-7652/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      cs-uri|contains:
          - '/wp-admin/admin-ajax.php'
      cs-uri-query|contains:
          - 'action=latepoint_save_booking_data'
      cs-method|exact:
          - 'POST'
      condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse