WordPress 5 vulnerabilities

Is the LatePoint – Calendar Booking Plugin for Appointments and Events plugin safe?

Below are the known, publicly disclosed vulnerabilities of the LatePoint – Calendar Booking Plugin for Appointments and Events (WordPress) component. If you use it on your site, check the version and update it before the flaw gets exploited.

Using the LatePoint – Calendar Booking Plugin for Appointments and Events plugin? Check for free whether your site is vulnerable through it, or have us update and secure it.
Check your site → Secure it with us

Known vulnerabilities

Wysoka · CVSS 7.5 CVE-2026-5356 July 8, 2026

LatePoint – Calendar Booking Plugin for Appointments and Events: podatność bezpieczeństwa

Podatność bezpieczeństwa w komponencie LatePoint – Calendar Booking Plugin for Appointments and Events. Ocena zagrożenia: Wysoka (CVSS 7.5). Zaktualizuj podatny komponent do najnowszej wersji lub tymczasowo go wyłącz.

Details and what to do → Source (NVD) ↗
Wysoka · CVSS 8.8 CVE-2026-13228 July 1, 2026

LatePoint – Calendar Booking Plugin for Appointments and Events: eskalacja uprawnień

Eskalacja uprawnień w komponencie LatePoint – Calendar Booking Plugin for Appointments and Events. Ocena zagrożenia: Wysoka (CVSS 8.8). Zaktualizuj podatny komponent do najnowszej wersji lub tymczasowo go wyłącz.

Details and what to do → Source (NVD) ↗
Wysoka · CVSS 7.5 CVE-2026-8176 June 16, 2026

LatePoint – Calendar Booking Plugin for Appointments and Events: eskalacja uprawnień

Eskalacja uprawnień w komponencie LatePoint – Calendar Booking Plugin for Appointments and Events. Ocena zagrożenia: Wysoka (CVSS 7.5). Zaktualizuj podatny komponent do najnowszej wersji lub tymczasowo go wyłącz.

Details and what to do → Source (NVD) ↗
Wysoka · CVSS 7.2 CVE-2026-7332 May 6, 2026

LatePoint – Calendar Booking Plugin for Appointments and Events: cross-site scripting (XSS)

Cross-site scripting (XSS) w komponencie LatePoint – Calendar Booking Plugin for Appointments and Events. Ocena zagrożenia: Wysoka (CVSS 7.2). Zaktualizuj podatny komponent do najnowszej wersji lub tymczasowo go wyłącz.

Details and what to do → Source (NVD) ↗
Wysoka · CVSS 8.8 CVE-2026-6741 April 27, 2026

LatePoint – Calendar Booking Plugin for Appointments and Events: eskalacja uprawnień

Eskalacja uprawnień w komponencie LatePoint – Calendar Booking Plugin for Appointments and Events. Ocena zagrożenia: Wysoka (CVSS 8.8). Zaktualizuj podatny komponent do najnowszej wersji lub tymczasowo go wyłącz.

Details and what to do → Source (NVD) ↗

How to check whether this affects you

  • Check the installed version of the LatePoint – Calendar Booking Plugin for Appointments and Events component in the admin panel.
  • Compare it with the fixed version noted in the details of the relevant vulnerability above.
  • If your version is older, update the component to the latest available.
  • If a fix has not been released yet, temporarily disable the vulnerable element and watch your logs.
How to secure WordPress → Scan your site → All current threats →
Do not guess, check

Is this plugin putting your site at risk?

We will run a free audit: we check versions, plugins and configuration, and tell you plainly whether you are safe.

Request a free audit →