
Vulnerabilities
LatePoint WordPress Plugin Race Condition Allows Unauthenticated Account Takeover
A critical authentication bypass in the LatePoint plugin lets attackers brute-force OTP codes and hijack customer accounts without credentials.
Everything Threat Times has reported about Race Condition: 2 stories, newest first. Part of our Cyber Attacks coverage.

A critical authentication bypass in the LatePoint plugin lets attackers brute-force OTP codes and hijack customer accounts without credentials.

Security researchers have detailed how a race condition in the Discourse forum software allowed attackers to inject malicious code through image uploads.