CVE-2026-49083
HIGHWordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability
Title source: cnaExploitation Summary
EIP tracks 2 public exploits for CVE-2026-49083. PoCs published by 87achrafg-stack, izxci.
AI-analyzed exploit summary This repository contains a functional Python exploit for CVE-2026-49083, a privilege escalation vulnerability in the LatePoint Calendar Booking Plugin (versions up to 5.5.1). The exploit allows authenticated Contributor-level users to escalate to Administrator by manipulating customer-to-WordPress user linking logic.
Description
Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.
Exploits (2)
This repository contains a functional Python exploit for CVE-2026-49083, a privilege escalation vulnerability in the LatePoint Calendar Booking Plugin (versions up to 5.5.1). The exploit allows authenticated Contributor-level users to escalate to Administrator by manipulating customer-to-WordPress user linking logic.
This repository contains a functional Python exploit for CVE-2026-49083, targeting a privilege escalation vulnerability in the LatePoint Calendar Booking Plugin (versions up to 5.5.1). The exploit allows authenticated Contributor-level users to escalate to Administrator by manipulating customer-to-WordPress user linking logic.
References (1)
Scores
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H