AB
Product
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
14
CVEs
0
On KEV
9.1
Max CVSS
11
New 30D
Severity mix
Critical 2High 4Medium 7Low 1
Watch
Add Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-104766 | 8.8 | Oct 10 | Appointment Booking Plugin <= 5.7.3 - Authenticated (Custom+) Privilege Escalation to 'settings[default_wp_role_for_customer]' Parameter Affected: through 5.7.3 |
| CVE-2026-103366 | 7.5 | Oct 14 | Appointment Booking Plugin <= 5.7.3 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'booking[id]' and 'cart[id]' Parameters Affected: through 5.7.3 |
| CVE-2026-96662 | 7.5 | Oct 10 | Appointment Booking Plugin <= 5.7.2 - Unauthenticated SQL Injection via 'booking[service_id]' Parameter Affected: through 5.7.2 |
| CVE-2026-100163 | 7.4 | Oct 14 | Appointment Booking Plugin <= 5.7.2 - Unauthenticated Authentication Bypass to Customer Account Takeover via Insufficient Verification in create_wp_user_for_customer() username_exists Fallback Affected: through 5.7.2 |
Showing 4