---
id: CVE-2026-105256
title: >-
  LatePoint < 5.7.5 - Unauthenticated Payment Bypass via 'payment_portion'
  Parameter
summary: >-
  The LatePoint WordPress plugin before 5.7.5 does not validate the
  client-supplied value that determines how much is charged for a booking
  against the amounts the service and site actually allow, allowing an
  unauthenticated visitor to mak…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-345
product: LatePoint
affected:
  - LatePoint < 5.7.5
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-21T10:11:43.292465Z'
published: '2026-10-21'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T10:14:55.218Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-105256'
references:
  - url: 'https://wpscan.com/vulnerability/53a81b39-e86b-4b73-8b4f-64746684055d/'
tags:
  - cve.org
ingestedAt: '2026-10-21T09:46:15.401Z'
---

## Overview

The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking against the amounts the service and site actually allow, allowing an unauthenticated visitor to make the amount due resolve to zero and obtain a confirmed appointment and a recorded order without completing any payment.

## Affected

- `LatePoint < 5.7.5`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.