AB
Product
Appointment Booking Plugin
by · last CVE Oct 21, 2026
6
CVEs
0
On KEV
5.4
Max CVSS
4
New 30D
Severity mix
Critical 0High 0Medium 3Low 3
Watch

Add Appointment Booking Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-11866
5.4
0%
Jul 16
LatePoint < 5.6.3 - Multiple Privileged Actions via CSRF
Affected: before 5.6.3
CVE-2026-105198
5.3
0%
Oct 8
LatePoint < 5.7.3 - Unauthenticated Customer PII Disclosure via IDOR
Affected: before 5.7.3
CVE-2026-15250
5.3
0%
Jul 30
LatePoint < 5.6.8 - Unauthenticated Booking Object Mass Assignment via Public Booking Funnel
Affected: before 5.6.8
CVE-2026-105196
3.3
0%
Oct 8
LatePoint < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities API
Affected: before 5.6.9
CVE-2026-105257
2.7
0%
Oct 21
LatePoint < 5.7.5 - Agent+ Customer PII Disclosure via IDOR
Affected: before 5.7.5
CVE-2026-105197
2.7
0%
Oct 8
LatePoint < 5.6.5 - Agent+ Arbitrary Order, Customer and Transaction Deletion via IDOR
Affected: before 5.6.5
Showing 6