LA
Product
LatePoint
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 2Medium 3Low 0
Watch
Add LatePoint to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8943 | 9.8 | Oct 8 | LatePoint <= 5.0.12 - Authentication Bypass Affected: before 5.0.13 |
| CVE-2024-8911 | 9.8 | Oct 8 | LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection Affected: before 5.0.12 |
| CVE-2026-57714 | 9.3 | Jul 13 | WordPress LatePoint plugin <= 5.6.3 - SQL Injection vulnerability Affected: through 5.6.3 |
| CVE-2024-2472 | 9.1 | Jun 14 | LatePoint Plugin <= 4.9.9 - Missing Authorization and Sensitive Information Exposure via IDOR Affected: before 4.9.91 |
| CVE-2024-43945 | 8.8 | Oct 21 | WordPress LatePoint plugin <= 4.9.91 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 4.9.91 |
| CVE-2026-49083 | 7.5 | Jun 15 | WordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability Affected: through 5.5.1 |
| CVE-2026-32533 | 6.5 | Mar 25 | WordPress LatePoint plugin <= 5.2.6 - Insecure Direct Object References (IDOR) vulnerability Affected: through <= 5.2.6 |
| CVE-2025-30836 | 6.5 | Mar 27 | WordPress LatePoint plugin <= 5.1.6 - Cross Site Scripting (XSS) vulnerability Affected: through 5.1.6 |
| CVE-2024-43992 | 5.4 | Sep 17 | WordPress LatePoint plugin <= 4.9.91 - Cross Site Scripting (XSS) vulnerability Affected: through 4.9.91 |
Showing 9
