LA
Product
LatePoint
by LatePoint · last CVE Jul 13, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 2Medium 2Low 0
Watch

Add LatePoint to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-8943
9.8
3%
Oct 8
The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12
Affected: before 5.0.13
CVE-2024-8911
9.8
3%
Oct 8
The LatePoint plugin for WordPress is vulnerable to Arbitrary User Password Change via SQL Injection in versions up to, and including, 5.0.11
Affected: before 5.0.12
CVE-2026-57714
9.3
0%
Jul 13
WordPress LatePoint plugin <= 5.6.3 - SQL Injection vulnerability
Affected: through 5.6.3
CVE-2024-2472
9.1
1%
Jun 14
The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the…
Affected: before 4.9.91
CVE-2024-43945
8.8
0%
Oct 21
Cross-Site Request Forgery (CSRF) vulnerability in Latepoint LatePoint allows Cross Site Request Forgery.This issue affects LatePoint: from n/a through 4.9.91
Affected: through 4.9.91
CVE-2026-49083
7.5
0%
Jun 15
WordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability
Affected: through 5.5.1
CVE-2026-32533
6.5
0%
Mar 25
WordPress LatePoint plugin <= 5.2.6 - Insecure Direct Object References (IDOR) vulnerability
Affected: through <= 5.2.6
CVE-2024-43992
5.4
0%
Sep 18
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Latepoint LatePoint allows Stored XSS.This issue affects LatePoint:…
Affected: through 4.9.91
Showing 8