Latepoint Appointment Booking Plugin – Latepoint | Calendar & Scheduling For WordPress
3 CVEs affecting Latepoint Appointment Booking Plugin – Latepoint | Calendar & Scheduling For WordPress. Latest disclosed: 2026-09-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-5391 | Medium | 6.4 | 2026-08-06 | The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_wrapper_classes' attribute of the 'latepoint_resources' shortcode… |
CVE-2026-13471 | Medium | 4.3 | 2026-09-18 | The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up t… |
CVE-2026-18441 | Medium | 4.3 | 2026-09-18 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all… |