LatePoint
LatePoint
Developer
5.2.10
Latest version
100,000
Installations
No date
Last updated
Vulnerability history
2 present
14 patched
6 Mitigation rules
- Authenticated (Administrator+) SQL Injection via JSON Import vulnerability<= 5.2.72 days ago
- WordPress LatePoint - Calendar Booking Plugin for Appointments and Events plugin <= 5.2.5 - Cross-Site Request Forgery vulnerability<= 5.2.5Feb 13, 2026
- WordPress LatePoint - Calendar Booking Plugin for Appointments and Events plugin <= 5.2.6 - Missing Authorization to Booking Details Exposure vulnerability<= 5.2.6Feb 11, 2026
- WordPress LatePoint - Calendar Booking Plugin for Appointments and Events plugin <= 5.2.5 - Unauthenticated Stored Cross-Site Scripting vulnerability<= 5.2.5Feb 9, 2026
- Cross-Site Request Forgery to Account Takeover via change_password() Function vulnerability<= 5.1.94Sep 30, 2025
- Unauthenticated Authentication Bypass via load_step Function vulnerability<= 5.1.94Sep 30, 2025
- Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability<= 5.1.94Sep 30, 2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 5.1.94Sep 30, 2025
- Unauthenticated LFI vulnerability< 5.1.94Aug 13, 2025
- Unauthenticated Insecure Direct Object Reference vulnerability<= 5.1.92May 13, 2025
- Cross Site Scripting (XSS) vulnerability<= 5.1.6Mar 27, 2025
- Authentication Bypass vulnerability<= 5.0.12Oct 8, 2024
- Unauthenticated Arbitrary User Password Change via SQL Injection vulnerability<= 5.0.11Oct 8, 2024
- Cross Site Scripting (XSS) vulnerability<= 4.9.91Aug 29, 2024
- Cross Site Request Forgery (CSRF) vulnerability<= 4.9.91Aug 26, 2024
- Missing Authorization and Sensitive Information Exposure via IDOR vulnerability<= 4.9.9Jun 14, 2024