Approved changes feed: RSS · Atom

cpe:2.3:a:latepoint:latepoint:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLatepoint (2e62729d-02bb-5b2b-bb21-81d088bcfd50)
ProductLatepoint (c885a4af-67bd-5f3d-80c0-d915cd9d56d2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/latepoint/latepoint purl2cpe 2026-06-01 10:11:07.898983

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-57714 vulnerable 2026-07-29 01:03:16.083508 WordPress LatePoint plugin <= 5.6.3 - SQL Injection vulnerability
CRITICAL (9.3)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LatePoint LatePoint latepoint allows Blind SQL Injection.This issue affects LatePoint: from n/a through <= 5.6.3.
Published: 2026-07-13T08:41:24.759Z
Updated: 2026-07-13T13:30:52.769Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49083 vulnerable 2026-07-29 00:57:44.968305 WordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability
HIGH (7.5)
Contributor Privilege Escalation in LatePoint <= 5.5.1 versions.
Published: 2026-06-15T20:19:17.107Z
Updated: 2026-06-16T01:18:45.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-32533 vulnerable 2026-06-08 07:57:17.686172 WordPress LatePoint plugin <= 5.2.6 - Insecure Direct Object References (IDOR) vulnerability
MEDIUM (6.5)
Authorization Bypass Through User-Controlled Key vulnerability in LatePoint LatePoint latepoint allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LatePoint: from n/a through <= 5.2.6.
Published: 2026-03-25T16:15:09.898Z
Updated: 2026-04-29T09:52:01.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30836 vulnerable 2026-06-08 07:17:01.898534 WordPress LatePoint plugin <= 5.1.6 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LatePoint LatePoint latepoint allows Stored XSS.This issue affects LatePoint: from n/a through <= 5.1.6.
Published: 2025-03-27T10:55:21.911Z
Updated: 2026-04-28T16:11:58.351Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43992 vulnerable 2026-06-08 06:45:53.371244 WordPress LatePoint plugin <= 4.9.91 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Latepoint LatePoint allows Stored XSS.This issue affects LatePoint: from n/a through 4.9.91.
Published: 2024-09-17T23:21:31.360Z
Updated: 2026-04-28T16:10:15.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43945 vulnerable 2026-06-08 06:45:53.273381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.