Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: latepoint Component: Latepoint Clear all filters
TI-2024-08303 CVE-2024-8943 · GHSA-jwc3-mm8j-j745

LatePoint <= 5.0.12 - Authentication Bypass

Priority MEDIUM 54

The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0308 Published 2024-10-08 No fix listed CWE-288
TI-2024-29581 CVE-2024-43992 · GHSA-p5q9-w23w-m9vx

WordPress LatePoint plugin <= 4.9.91 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Latepoint LatePoint allows Stored XSS.This issue affects LatePoint: from n/a through 4.9.91.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-09-17 No fix listed CWE-79
TI-2024-02298 CVE-2024-2472 · GHSA-c2xh-vr49-pcp6

LatePoint Plugin <= 4.9.9 - Missing Authorization and Sensitive Information Exposure via IDOR

Priority MEDIUM 48

The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'start_or_use_session_for_customer' function in all versions up to…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00623 Published 2024-06-14 No fix listed CWE-639