CVE-2026-110653 | CVSS: 9.1 | 严重级别: CRITICAL
The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in all versions up to, and including, 5.7.4. This is due to a non-atomic read-modify-write on the OTP verification attempts counter in the `verifyOTP` function: the counter is incremented using a stale in-memory value with no conditional `WHERE attempts < 10` guard on the `UPDATE` and no `SELECT … FOR UPDATE` row lock, creating a TOCTOU window that allows concurrent requests to bypass the 10-attempt lockout. This makes it possible for
参考链接:
• https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/controllers/
• https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/controllers/
• https://plugins.trac.wordpress.org/browser/latepoint/tags/5.7.4/lib/helpers/otp_
📌 数据来源: NVD 官方