latepoint

7 results · Clear filters · Feed

• Critical 9.1
  CVE-2026-118066 Scanner template

  Appointment Booking Plugin <= 5.7.6 - Unauthenticated Authentication Bypass via Account Takeover via 'IS NOT NULL' Sentinel in 'password_reset_token' Parameter

  The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Account Takeover in all versions up to, and including, 5.7.6. This is due to the `OsModel::build_conditions_query(…

  latepoint Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress Web / CMS
  Nov 7, 2026
• Critical 9.1
  CVE-2026-110653

  Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter

  The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in all versions up to, and including, 5.7.4. This is due to a non-atomic read-modify-write on the O…

  latepoint Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress Web / CMS
  Oct 17, 2026
• Critical 9.1
  CVE-2026-92966 Public exploit

  Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field

  The The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.7.0. This is due to the software allowing users to execute an acti…

  latepoint Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress Web / CMS
  Oct 1, 2026
• Critical 9.3
  CVE-2026-57714

  WordPress LatePoint plugin <= 5.6.3 - SQL Injection vulnerability

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LatePoint LatePoint latepoint allows Blind SQL Injection.This issue affects LatePoint: from n/a through <= 5.6.3.

  latepoint LatePoint
  Jul 13, 2026
• Critical 9.8
  CVE-2024-8911 Scanner template

  LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection

  The LatePoint plugin for WordPress is vulnerable to Arbitrary User Password Change via SQL Injection in versions up to, and including, 5.0.11. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existi…

  latepoint LatePoint Plugin Web / CMS
  Oct 8, 2024
• Critical 9.8
  CVE-2024-8943 Scanner template

  LatePoint <= 5.0.12 - Authentication Bypass

  The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12. This is due to insufficient verification on the user being supplied during the booking customer step. This makes it possible for unauthenticate…

  latepoint LatePoint Plugin Web / CMS
  Oct 8, 2024
• Critical 9.1
  CVE-2024-2472

  LatePoint Plugin <= 4.9.9 - Missing Authorization and Sensitive Information Exposure via IDOR

  The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'start_or_use_session_for_customer' function in all versions up to and including 4.9.9. This makes it poss…

  latepoint LatePoint Plugin Web / CMS
  Jun 14, 2024