Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 38
   CVE NVD 1h ago

   The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via…

   The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Account Takeover in all versions up to, and including, 5.7.6. This is due to the…

   CVSS 9.1 CVE-2026-118066 Latepoint Web platform
2. 23
   CVE NVD 10h ago

   The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting…

   The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'customer[email] (inside params)' parameter in all versions up to, and…

   CVSS 5.4 CVE-2026-119152 Latepoint Web platform

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Latepoint&limit=100. RSS for this section: feed.xml.