A vulnerability labeled as critical has been found in LatePoint Plugin up to 5.2.7 on WordPress. The impacted element is an unknown function. Such manipulation of the argument wordpress_user_id leads to weak password recovery.
This vulnerability is traded as CVE-2026-1566. The attack may be launched remotely. There is no exploit available.
