Latepoint
Vendor:
First CVE: Jun 14, 2024 · Active for 2 years
8
Total CVEs
More Total CVEs than 85% of tracked products
2.7
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
8.3
Avg CVSS
Higher Avg CVSS than 73% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Latepoint over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 14, 2024
2 years ago
Most Recent CVE
Jul 13, 2026
11 days ago
CVE Severity & Scoring
Latepoint8 CVEs
25%
25%
50%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network8 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (87.5%)
High1 (12.5%)
Unknown0 (0.0%)
User Interaction
None5 (62.5%)
Unknown0 (0.0%)
Required3 (37.5%)
Privileges Required
Low3 (37.5%)
High0 (0.0%)
None5 (62.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-8943CRITICAL The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12. This is due to insufficient verification on the user being supp | Oct 8, 2024 | 9.8 | 41 | NO | YES |
CVE-2026-57714CRITICAL Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LatePoint LatePoint latepoint allows Blind SQL Injection.This issue affects La | Jul 13, 2026 | 9.3 | 40 | NO | NO |
CVE-2024-8911CRITICAL The LatePoint plugin for WordPress is vulnerable to Arbitrary User Password Change via SQL Injection in versions up to, and including, 5.0.11. This is due to insufficient escaping | Oct 8, 2024 | 9.8 | 40 | NO | YES |
CVE-2026-49083HIGH Contributor Privilege Escalation in LatePoint <= 5.5.1 versions. | Jun 15, 2026 | 7.5 | 30 | NO | NO |
CVE-2024-2472CRITICAL The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'start_or_use_session_for_c | Jun 14, 2024 | 9.1 | 26 | NO | NO |
CVE-2024-43945HIGH Cross-Site Request Forgery (CSRF) vulnerability in Latepoint LatePoint allows Cross Site Request Forgery.This issue affects LatePoint: from n/a through 4.9.91. | Oct 21, 2024 | 8.8 | 24 | NO | NO |
CVE-2025-30836MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LatePoint LatePoint latepoint allows Stored XSS.This issue affects LatePoint: | Mar 27, 2025 | 6.5 | 19 | NO | NO |
CVE-2024-43992MEDIUM Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Latepoint LatePoint allows Stored XSS.This issue affects LatePoint: fro | Sep 18, 2024 | 5.4 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
2 CVEs
25.0% of CVEs· 98th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Latepoint
Top CWEs
Versions
No cataloged versions.