Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to SQL Injection via the JSON Import in all versions up to, and including, 5.2.7 due to insufficient validation on the user-supplied JSON data. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute arbitrary SQL queries on the database that can be used to extract information via time-based techniques, drop tables, or modify data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-1487 The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to SQL Injection via the JSON Import in all versions up to, and i… https://www.cve.org/CVERecord?id=CVE-2026-1487
Post summary
The CVE-2026-1487 entry discloses a SQL injection flaw in the LatePoint WordPress plugin’s JSON import feature.
🚨*CVE* CVE-2026-1487 The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to SQL Injection via the JSON Import in all versions up to, and i… https://www.cve.org/CVERecord?id=CVE-2026-1487 ----- Traducción: CVE-2026-1487 The… http://infoflow.cloud`
Post summary
The post announces CVE-2026-1487, a SQL injection flaw in the LatePoint WordPress plugin via JSON import, with no mention of PoC, exploit, or patch.
CVE-2026-1487 SQL Injection in LatePoint WordPress Plugin via JSON Import Functionality https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1487
Post summary
A new SQL injection vulnerability (CVE-2026-1487) has been disclosed in the LatePoint WordPress plugin, exploitable via its JSON import feature.