Product by Latepoint
Appointment Booking Plugin – Latepoint | Calendar & Scheduling For Wordpress
16 known vulnerabilities in Appointment Booking Plugin – Latepoint | Calendar & Scheduling For Wordpress (Latepoint), 0 of them actively exploited (CISA KEV).
Key figures
16
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-118066 | Improper Authentication (CVE-2026-118066) | 9.1 | |
| Critical | CVE-2026-92966 | Code Injection (CVE-2026-92966) | 9.1 | |
| Critical | CVE-2026-110653 | Improper Authentication (CVE-2026-110653) | 9.1 | |
| High | CVE-2026-103366 | Authorization Bypass Through User-Controlled Key (CVE-2026-103366) | 7.5 | |
| High | CVE-2026-100163 | Improper Authentication (CVE-2026-100163) | 7.4 | |
| High | CVE-2026-104766 | Improper Privilege Management (CVE-2026-104766) | 8.8 | |
| High | CVE-2026-96662 | SQL Injection (CVE-2026-96662) | 7.5 | |
| Medium | CVE-2026-13471 | Authorization Bypass Through User-Controlled Key (CVE-2026-13471) | 4.3 | |
| Medium | CVE-2026-119152 | Cross-site Scripting (CVE-2026-119152) | 5.4 | |
| Medium | CVE-2026-18441 | Authorization Bypass Through User-Controlled Key (CVE-2026-18441) | 4.3 | |
| Medium | CVE-2026-94432 | Authorization Bypass Through User-Controlled Key (CVE-2026-94432) | 5.3 | |
| Medium | CVE-2026-103380 | Exposure of Sensitive Information to an Unauthorized Actor (CVE-2026-103380) | 4.3 | |
| Medium | CVE-2026-17538 | Authorization Bypass Through User-Controlled Key (CVE-2026-17538) | 5.4 | |
| Medium | CVE-2026-5391 | Cross-site Scripting (CVE-2026-5391) | 6.4 | |
| Low | CVE-2026-111602 | Exposure of Sensitive Information to an Unauthorized Actor (CVE-2026-111602) | 3.7 | |
| Medium | CVE-2026-91050 | Authorization Bypass Through User-Controlled Key (CVE-2026-91050) | 4.3 |