Known vulnerabilities in Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress

Appointment booking plugin for WordPress. Let clients self-schedule 24/7, accept payments at booking, and reduce no-shows, all from your WordPress sit …

38Reported vulnerabilities

9.8Highest CVSS score

5.6.10Latest version

100,000+Active installs

What to do now

Update Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress to 5.4.0 or later. 36 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 2, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2024-8943	Critical 9.8	3.1%	Before 5.0.13	`5.0.13`	October 8, 2024
CVE-2024-8911	Critical 9.8	2.9%	Before 5.0.12	`5.0.12`	October 8, 2024
CVE-2025-6715	Critical 9.8	0.6%	5.1.93 and earlier	`5.1.94`	July 23, 2025
CVE-2024-2472	Critical 9.1	0.6%	Before 4.9.91	`4.9.91`	June 14, 2024
CVE-2026-13228	High 8.8	0.6%	0 to 5.6.3 (inclusive)	`5.6.4`	July 1, 2026
CVE-2026-49083	High 8.8	0.3%	5.5.1 and earlier	`5.5.2`	June 5, 2026
CVE-2026-6741	High 8.8	0.3%	0 to 5.4.1 (inclusive)	`5.4.2`	April 27, 2026
CVE-2026-1566	High 8.8	0.3%	5.2.7 and earlier	`5.2.8`	March 2, 2026
CVE-2025-7052	High 8.8	0.2%	0 to 5.1.94 (inclusive)	`5.2.0`	September 30, 2025
CVE-2025-7038	High 8.2	0.4%	0 to 5.1.94 (inclusive)	`5.2.0`	September 30, 2025
CVE-2026-5356	High 7.5	0.4%	0 to 5.4.0 (inclusive)	`5.4.1`	July 8, 2026
CVE-2026-57714	High 7.5	0.4%	5.6.3 and earlier	`5.6.4`	July 8, 2026
CVE-2026-8176	High 7.5	0.5%	0 to 5.5.1 (inclusive)	`5.5.2`	June 16, 2026
CVE-2026-7332	High 7.2	0.4%	0 to 5.5.0 (inclusive)	`5.5.1`	May 6, 2026
CVE-2026-0617	High 7.2	0.4%	0 to 5.2.5 (inclusive)	`5.2.6`	February 3, 2026
CVE-2026-7448	High 7.2	—	5.5.0 and earlier	`5.5.1`	May 6, 2026
CVE-2026-7457	Medium 6.4	0.3%	0 to 5.5.0 (inclusive)	`5.5.1`	May 6, 2026
CVE-2026-4785	Medium 6.4	0.4%	0 to 5.3.0 (inclusive)	`5.3.1`	April 8, 2026
CVE-2026-1487	Medium 6.5	0.3%	5.2.7 and earlier	`5.2.8`	March 2, 2026
CVE-2025-30836	Medium 6.4	0.4%	5.1.6 and earlier	`5.1.7`	March 27, 2025
CVE-2024-43992	Medium 6.4	0.3%	4.9.91 and earlier	—	August 29, 2024
CVE-2026-5391	Medium 6.4	0.2%	0 to 5.3.2 (inclusive)	`5.4.0`	August 6, 2026
CVE-2025-6941	Medium 6.4	0.2%	0 to 5.1.94 (inclusive)	`5.2.0`	September 30, 2025
CVE-2026-2324	Medium 6.1	0.1%	0 to 5.2.7 (inclusive)	`5.2.8`	March 11, 2026
CVE-2026-11398	Medium 5.3	0.6%	0 to 5.6.1 (inclusive)	`5.6.2`	July 3, 2026
CVE-2026-12657	Medium 5.3	0.7%	0 to 5.6.2 (inclusive)	`5.6.3`	July 2, 2026
CVE-2026-7652	Medium 5.3	0.7%	0 to 5.5.0 (inclusive)	`5.5.1`	May 9, 2026
CVE-2026-5234	Medium 5.3	0.7%	0 to 5.3.2 (inclusive)	`5.4.0`	April 17, 2026
CVE-2025-6815	Medium 5.5	0.3%	0 to 5.1.94 (inclusive)	`5.2.0`	September 30, 2025
CVE-2026-15250	Medium 5.3	0.2%	5.6.7 and earlier	`5.6.8`	July 10, 2026
CVE-2026-1537	Medium 5.3	0.2%	0 to 5.2.6 (inclusive)	`5.2.7`	February 12, 2026
CVE-2025-3769	Medium 5.3	0.3%	0 to 5.1.92 (inclusive)	`5.1.93`	May 14, 2025
CVE-2026-11866	Medium 4.3	0.1%	5.6.2 and earlier	`5.6.3`	June 25, 2026
CVE-2026-9719	Medium 4.3	0.2%	0 to 5.6.0 (inclusive)	`5.6.1`	June 6, 2026
CVE-2026-5365	Medium 4.3	0.1%	0 to 5.3.2 (inclusive)	`5.4.0`	May 14, 2026
CVE-2026-32533	Medium 4.3	0.2%	5.2.6 and earlier	`5.2.7`	March 23, 2026
CVE-2025-14873	Medium 4.3	0.1%	0 to 5.2.5 (inclusive)	`5.2.6`	February 14, 2026
CVE-2024-43945	Medium 4.3	0.2%	4.9.91 and earlier	—	August 26, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.