{"vulnerability": "CVE-2026-92966", "sightings": [{"uuid": "3d4257e5-029d-4381-825e-dc8828e82463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-92966", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117364124891613144", "content": "CVE-2026-92966: CRITICAL code injection in LatePoint Appointment Booking Plugin (<=5.7.0) for WordPress. Unauthenticated attackers can inject & execute shortcodes, risking full site compromise. Disable plugin or restrict access until patched. https://radar.offseq.com/threat/cve-2026-92966-cwe-94-improper-control-of-generation-of-code-code-injection-in-latepoint-appointment-0d4b3da3082989fe #OffSeq #WordPress #CVE202692966", "creation_timestamp": "2026-10-01T06:00:25.952166Z"}, {"uuid": "66f9a5dd-996f-4dfe-84ed-5de0fa1f068e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92966", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mws6y75bgb24", "content": "\ud83d\udea8 CVE-2026-92966 \u2014 CVSS 9.1 CRITICAL\n\nThe The Appointment Booking Plugin \u2013 LatePoint | Calendar & Scheduling for WordPress plugin for WordPress i...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-92966\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-01T06:07:57.470168Z"}, {"uuid": "89c5193f-2db4-4eef-b191-76616fc590d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92966", "type": "seen", "source": "https://t.me/GithubRedTeam/103936", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-92966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 07:39:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-92966 \u2014 WordPress LatePoint \u22645.7.0 unauthenticated stored shortcode execution (CVSS 9.1, CWE-94). PoCbit mass-exploit PoC: plant [caption]/custom shortcode in booking first name \u2192 Customer Cabinet block double do_shortcode; fixed in 5.7.1. No API key. check/exploit/mass, hits.txt & exploited.txt, https://pocbit.org/pocs/cve-2026-92966\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-01T08:00:07.000000Z"}, {"uuid": "9a2ec209-fe05-4f22-96c2-87b2a4cfb746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92966", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103936", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-92966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 07:39:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-92966 \u2014 WordPress LatePoint \u22645.7.0 unauthenticated stored shortcode execution (CVSS 9.1, CWE-94). PoCbit mass-exploit PoC: plant [caption]/custom shortcode in booking first name \u2192 Customer Cabinet block double do_shortcode; fixed in 5.7.1. No API key. check/exploit/mass, hits.txt & exploited.txt, https://pocbit.org/pocs/cve-2026-92966\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-01T08:00:07.000000Z"}, {"uuid": "4e1ba9dd-9ece-4827-b207-f55c65fb749b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92966", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwsxxpuswv2e", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-92966: The The Appointment Booking Plugin \u2013 LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to arbitrary shortcode e\u2026\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-92966\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-10-01T13:34:59.223163Z"}, {"uuid": "49f78968-8426-4d1d-86c0-2d79391f03f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92966", "type": "seen", "source": "Telegram/M05jujIsWToE4MgSdGmdNSHprqvyhSxcJ2hVbHwq7Mr5qTM", "content": "", "creation_timestamp": "2026-10-01T15:00:06.000000Z"}, {"uuid": "89ce1ec8-a192-4ecb-847f-2f78ebb2e816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92966", "type": "seen", "source": "Telegram/aXWnQb6jqt1KthhTtxgwLpXgv9lgOq_XoZIS2bKYHfJ_8gM", "content": "", "creation_timestamp": "2026-10-01T11:00:14.000000Z"}, {"uuid": "f44ec99b-4b8d-465e-966d-e2d5f73212e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92966", "type": "published-proof-of-concept", "source": "Telegram/aXWnQb6jqt1KthhTtxgwLpXgv9lgOq_XoZIS2bKYHfJ_8gM", "content": "", "creation_timestamp": "2026-10-01T11:00:14.000000Z"}, {"uuid": "28aa33e4-de32-4b8b-8653-041c8eae0501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-92966", "type": "published-proof-of-concept", "source": "Telegram/M05jujIsWToE4MgSdGmdNSHprqvyhSxcJ2hVbHwq7Mr5qTM", "content": "", "creation_timestamp": "2026-10-01T15:00:06.000000Z"}]}