TI-2024-08303 CVE-2024-8943 · GHSA-jwc3-mm8j-j745
LatePoint <= 5.0.12 - Authentication Bypass
Priority MEDIUM 54
The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12.
latepoint
Records48All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9
Exploited now
latepoint records in CISA KEVNo latepoint vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Latepoint · all components
TI-2024-08274 CVE-2024-8911 · GHSA-pg6c-99q5-3xqp
LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection
Priority MEDIUM 54
The LatePoint plugin for WordPress is vulnerable to Arbitrary User Password Change via SQL Injection in versions up to, and including, 5.0.11.
TI-2024-02298 CVE-2024-2472 · GHSA-c2xh-vr49-pcp6
LatePoint Plugin <= 4.9.9 - Missing Authorization and Sensitive Information Exposure via IDOR
Priority MEDIUM 48
The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'start_or_use_session_for_customer' function in all versions up to…
TI-2024-29534 CVE-2024-43945 · GHSA-8273-cqw8-3w74
WordPress LatePoint plugin <= 4.9.91 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Latepoint LatePoint allows Cross Site Request Forgery.This issue affects LatePoint: from n/a through 4.9.91.
TI-2024-29581 CVE-2024-43992 · GHSA-p5q9-w23w-m9vx
WordPress LatePoint plugin <= 4.9.91 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Latepoint LatePoint allows Stored XSS.This issue affects LatePoint: from n/a through 4.9.91.