Latepoint

    Dashboard / Vendors

    Products: 4
    Vulnerabilities: 47
    Known Exploited: 0
    7
    Critical Level Threats
    13
    High Level Threats
    25
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-111602

    Appointment Booking Plugin <= 5.7.4 - Unauthenticated Sensitive Information Disclosure via ORM Operator Injection in 'customer[uuid]' Parameter

    Last Modified: Oct 23, 2026
    Published: Oct 17, 2026

    CVE-2026-110653

    Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter

    Last Modified: Oct 18, 2026
    Published: Oct 17, 2026

    CVE-2026-103380

    Appointment Booking Plugin <= 5.7.3 - Authenticated (Subscriber+) Sensitive Information Exposure in 'first_name' Parameter Template Re-expansion

    Last Modified: Oct 17, 2026
    Published: Oct 14, 2026

    CVE-2026-103366

    Appointment Booking Plugin <= 5.7.3 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'booking[id]' and 'cart[id]' Parameters

    Last Modified: Oct 17, 2026
    Published: Oct 14, 2026

    CVE-2026-100163

    Appointment Booking Plugin <= 5.7.2 - Unauthenticated Authentication Bypass to Customer Account Takeover via Insufficient Verification in create_wp_user_for_customer() username_exists Fallback

    Last Modified: Oct 24, 2026
    Published: Oct 14, 2026
    Items Per Page