LA
Product
LatePoint
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 2Medium 2Low 0
Watch
Add LatePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8943 | 9.8 | Oct 8 | The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12 Affected: before 5.0.13 |
| CVE-2024-8911 | 9.8 | Oct 8 | The LatePoint plugin for WordPress is vulnerable to Arbitrary User Password Change via SQL Injection in versions up to, and including, 5.0.11 Affected: before 5.0.12 |
| CVE-2026-57714 | 9.3 | Jul 13 | WordPress LatePoint plugin <= 5.6.3 - SQL Injection vulnerability Affected: through 5.6.3 |
| CVE-2024-2472 | 9.1 | Jun 14 | The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the… Affected: before 4.9.91 |
| CVE-2024-43945 | 8.8 | Oct 21 | Cross-Site Request Forgery (CSRF) vulnerability in Latepoint LatePoint allows Cross Site Request Forgery.This issue affects LatePoint: from n/a through 4.9.91 Affected: through 4.9.91 |
| CVE-2026-49083 | 7.5 | Jun 15 | WordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability Affected: through 5.5.1 |
| CVE-2026-32533 | 6.5 | Mar 25 | WordPress LatePoint plugin <= 5.2.6 - Insecure Direct Object References (IDOR) vulnerability Affected: through <= 5.2.6 |
| CVE-2024-43992 | 5.4 | Sep 18 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Latepoint LatePoint allows Stored XSS.This issue affects LatePoint:… Affected: through 4.9.91 |
Showing 8
