Skip to content
OpenAdvisories

Vendor

latepoint

49 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-92966 Public exploit

    Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field

    The The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.7.0. This is due to the software allowing users to execute an acti…

  • High 7.5
    CVE-2026-49083 Public exploit

    WordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability

    Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.