Vendor

    Latepoint

    49 known vulnerabilities in products by Latepoint, 0 of them actively exploited (CISA KEV).

    Key figures

    49

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Latepoint
    CriticalCVE-2026-118066

    Improper Authentication (CVE-2026-118066)

    		9.1
    CriticalCVE-2024-8943

    LatePoint <= 5.0.12 - Authentication Bypass

    		9.8
    CriticalCVE-2024-8911

    LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection

    		9.8
    CriticalCVE-2026-92966

    Code Injection (CVE-2026-92966)

    		9.1
    CriticalCVE-2026-110653

    Improper Authentication (CVE-2026-110653)

    		9.1
    HighCVE-2026-13228

    Improper Privilege Management (CVE-2026-13228)

    		8.8
    HighCVE-2026-103366

    Authorization Bypass Through User-Controlled Key (CVE-2026-103366)

    		7.5
    HighCVE-2026-100163

    Improper Authentication (CVE-2026-100163)

    		7.4
    HighCVE-2026-104766

    Improper Privilege Management (CVE-2026-104766)

    		8.8
    CriticalCVE-2026-57714

    WordPress LatePoint plugin <= 5.6.3 - SQL Injection vulnerability

    		9.3
    HighCVE-2026-96662

    SQL Injection (CVE-2026-96662)

    		7.5
    CriticalCVE-2024-2472

    LatePoint Plugin <= 4.9.9 - Missing Authorization and Sensitive Information Exposure via IDOR

    		9.1
    HighCVE-2026-8176

    Improper Privilege Management (CVE-2026-8176)

    		7.5
    MediumCVE-2026-12657

    Authorization Bypass Through User-Controlled Key (CVE-2026-12657)

    		5.3
    MediumCVE-2026-7652

    LatePoint <= 5.5.0 - Unauthenticated Account Takeover via Weak Password Recovery Mechanism

    		5.3
    HighCVE-2026-7332

    Cross-site Scripting (CVE-2026-7332)

    		7.2
    MediumCVE-2026-5234

    Authorization Bypass Through User-Controlled Key (CVE-2026-5234)

    		5.3
    HighCVE-2026-1566

    LatePoint <= 5.2.7 - Authenticated (Agent+) Privilege Escalation

    		8.8
    HighCVE-2026-5356

    Missing Authorization (CVE-2026-5356)

    		7.5
    HighCVE-2026-6741

    Improper Privilege Management (CVE-2026-6741)

    		8.8
    MediumCVE-2026-11398

    Missing Authorization (CVE-2026-11398)

    		5.3
    HighCVE-2026-49083

    WordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability

    		7.5
    HighCVE-2025-7038

    LatePoint <= 5.1.94 - Unauthenticated Authentication Bypass via load_step Function

    		8.2
    MediumCVE-2026-13471

    Authorization Bypass Through User-Controlled Key (CVE-2026-13471)

    		4.3
    HighCVE-2026-0617

    Cross-site Scripting (CVE-2026-0617)

    		7.2

    All vulnerabilities in search

    Products

    Products by Latepoint
    Latepoint – Calendar Booking Plugin For Appointments And Events240
    Appointment Booking Plugin – Latepoint | Calendar & Scheduling For Wordpress160
    LatePoint90
    Latepoint Plugin30