Abilities-Api — PoC Archivehttps://poc.intelseclab.com/tags/abilities-api/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000LatePoint Calendar Booking Plugin Agent-to-Administrator Privilege Escalation — CVE-2026-6741https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-6741-latepoint-privesc/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-6741-latepoint-privesc/High severity (CVSS 8.8) — web · CVE-2026-6741. Status: PoC. Affects: LatePoint – Calendar Booking Plugin for Appointments and Events (WordPress plugin, slug latepoint). Tags: wordpress, latepoint, privilege-escalation, abilities-api, rest-api, account-takeover, cwe-269.webHighwordpresslatepointprivilege-escalationabilities-apirest-apiaccount-takeovercwe-269