What’s Vulnerable › Products

Appointment Booking Plugin vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Appointment Booking Plugin version is affected

Latest Appointment Booking Plugin vulnerabilities

• CVE-2026-105257 — LatePoint < 5.7.5 - Agent+ Customer PII Disclosure via IDOR (CVSS 2.7)
• CVE-2026-105198 — LatePoint < 5.7.3 - Unauthenticated Customer PII Disclosure via IDOR (CVSS 5.3)
• CVE-2026-105197 — LatePoint < 5.6.5 - Agent+ Arbitrary Order, Customer and Transaction Deletion via IDOR (CVSS 2.7)
• CVE-2026-105196 — LatePoint < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities API (CVSS 3.3)
• CVE-2026-15250 — LatePoint < 5.6.8 - Unauthenticated Booking Object Mass Assignment via Public Booking Funnel (CVSS 5.3)
• CVE-2026-11866 — LatePoint < 5.6.3 - Multiple Privileged Actions via CSRF (CVSS 5.4)