Skip to content
OpenAdvisories

Product · latepoint

LatePoint Plugin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-8911 Scanner template

    LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection

    The LatePoint plugin for WordPress is vulnerable to Arbitrary User Password Change via SQL Injection in versions up to, and including, 5.0.11. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existi…

    latepoint LatePoint Plugin Web / CMS
  • Critical 9.8
    CVE-2024-8943 Scanner template

    LatePoint <= 5.0.12 - Authentication Bypass

    The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12. This is due to insufficient verification on the user being supplied during the booking customer step. This makes it possible for unauthenticate…

    latepoint LatePoint Plugin Web / CMS
  • Critical 9.1
    CVE-2024-2472

    LatePoint Plugin <= 4.9.9 - Missing Authorization and Sensitive Information Exposure via IDOR

    The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'start_or_use_session_for_customer' function in all versions up to and including 4.9.9. This makes it poss…

    latepoint LatePoint Plugin Web / CMS