https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-43945.htmlhttps://patchthecve.com/cve/CVE-2024-43945.htmlWed, 17 Jun 2026 07:52:02 +0000MEDIUM 6.5: Cross-Site Request Forgery (CSRF) vulnerability in Latepoint LatePoint allows Cross Site Request Forgery.This issue affects LatePoint: from n/a through 4.9.91.https://patchthecve.com/cve/CVE-2024-8943.htmlhttps://patchthecve.com/cve/CVE-2024-8943.htmlWed, 17 Jun 2026 08:23:36 +0000CRITICAL 9.8: The LatePoint plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.0.12. This is due to insufficient verification on the user being supplied during the booking customer step. This makes it possible for unauthenticated attackers to log in as any existing ushttps://patchthecve.com/cve/CVE-2024-8911.htmlhttps://patchthecve.com/cve/CVE-2024-8911.htmlWed, 17 Jun 2026 08:23:32 +0000CRITICAL 9.8: The LatePoint plugin for WordPress is vulnerable to Arbitrary User Password Change via SQL Injection in versions up to, and including, 5.0.11. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for https://patchthecve.com/cve/CVE-2024-43992.htmlhttps://patchthecve.com/cve/CVE-2024-43992.htmlWed, 17 Jun 2026 07:52:07 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Latepoint LatePoint allows Stored XSS.This issue affects LatePoint: from n/a through 4.9.91.https://patchthecve.com/cve/CVE-2024-2472.htmlhttps://patchthecve.com/cve/CVE-2024-2472.htmlWed, 17 Jun 2026 07:24:36 +0000CRITICAL 9.1: The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'start_or_use_session_for_customer' function in all versions up to and including 4.9.9. This makes it possible for unauthenticated attackers to vie