LatePoint
LatePoint
Developer
5.5.1
Latest version
100,000
Installations
No date
Last updated
Vulnerability history
2 present
25 patched
12 Mitigation rules
- Cross-Site Request Forgery vulnerability<= 5.3.29 hours ago
- Unauthenticated Account Takeover vulnerability<= 5.5.05 days ago
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 5.5.07 days ago
- Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability<= 5.5.07 days ago
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 5.5.07 days ago
- Authenticated (Agent+) Privilege Escalation to Administrator via 'connect-customer-to-wp-user' Ability vulnerability<= 5.4.127/04/2026
- Insecure Direct Object Reference to Unauthenticated Sensitive Financial Data Exposure via Sequential Invoice ID vulnerability<= 5.3.217/04/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 5.3.007/04/2026
- Insecure Direct Object References (IDOR) vulnerability<= 5.2.623/03/2026
- WordPress LatePoint - Calendar Booking Plugin for Appointments and Events plugin <= 5.2.7 - Cross-Site Request Forgery in Booking Form Settings Update to Stored Cross-Site Scripting vulnerability<= 5.2.711/03/2026
- Authenticated (Agent+) Privilege Escalation vulnerability<= 5.2.705/03/2026
- Authenticated (Administrator+) SQL Injection via JSON Import vulnerability<= 5.2.702/03/2026
- WordPress LatePoint - Calendar Booking Plugin for Appointments and Events plugin <= 5.2.5 - Cross-Site Request Forgery vulnerability<= 5.2.513/02/2026
- WordPress LatePoint - Calendar Booking Plugin for Appointments and Events plugin <= 5.2.6 - Missing Authorization to Booking Details Exposure vulnerability<= 5.2.611/02/2026
- WordPress LatePoint - Calendar Booking Plugin for Appointments and Events plugin <= 5.2.5 - Unauthenticated Stored Cross-Site Scripting vulnerability<= 5.2.509/02/2026
- Cross-Site Request Forgery to Account Takeover via change_password() Function vulnerability<= 5.1.9430/09/2025
- Unauthenticated Authentication Bypass via load_step Function vulnerability<= 5.1.9430/09/2025
- Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability<= 5.1.9430/09/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 5.1.9430/09/2025
- Unauthenticated LFI vulnerability< 5.1.9413/08/2025
- Unauthenticated Insecure Direct Object Reference vulnerability<= 5.1.9213/05/2025
- Cross Site Scripting (XSS) vulnerability<= 5.1.627/03/2025
- Authentication Bypass vulnerability<= 5.0.1208/10/2024
- Unauthenticated Arbitrary User Password Change via SQL Injection vulnerability<= 5.0.1108/10/2024
- Cross Site Scripting (XSS) vulnerability<= 4.9.9129/08/2024
- Cross Site Request Forgery (CSRF) vulnerability<= 4.9.9126/08/2024
- Missing Authorization and Sensitive Information Exposure via IDOR vulnerability<= 4.9.914/06/2024