Alta
CVE-2026-7448
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 49
Restablecer filtros
Alta
CVE-2026-7332
LatePoint <= 5.5.0 - Unauthenticated Stored Cross-Site Scripting via 'booking_form_page_url' Parameter
Media
CVE-2026-7457
LatePoint <= 5.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Customer Cabinet Profile Update
Alta
CVE-2026-6741
LatePoint <= 5.4.1 - Authenticated (Agent+) Privilege Escalation to Administrator via 'connect-customer-to-wp-user' Ability
Media
CVE-2026-5234
LatePoint <= 5.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Financial Data Exposure via Sequential Invoice ID
Media
CVE-2026-4785
LatePoint <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2026-32533
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.6 - Authenticated (Subscriber+) Insecure Direct Object Reference
Media
CVE-2026-2324
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.7 - Cross-Site Request Forgery in Booking Form Settings Update to Stored Cross-Site Scripting
Media
CVE-2026-1487
LatePoint <= 5.2.7 - Authenticated (Administrator+) SQL Injection via JSON Import
Alta
CVE-2026-1566
LatePoint <= 5.2.7 - Authenticated (Agent+) Privilege Escalation
Media
CVE-2025-14873
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.5 - Cross-Site Request Forgery
Media
CVE-2026-1537
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.6 - Missing Authorization to Booking Details Exposure
Alta
CVE-2026-0617
LatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.5 - Unauthenticated Stored Cross-Site Scripting
Alta
CVE-2025-7052
LatePoint <= 5.1.94 - Cross-Site Request Forgery to Account Takeover via change_password() Function
Alta
CVE-2025-7038
LatePoint <= 5.1.94 - Unauthenticated Authentication Bypass via load_step Function
Media
CVE-2025-6941
LatePoint <= 5.1.94 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Media
CVE-2025-6815
LatePoint <= 5.1.94 - Authenticated (Administrator+) Stored Cross-Site Scripting
Crítica
CVE-2025-6715
LatePoint <= 5.1.93 - Unauthenticated Local File Inclusion
Media
CVE-2025-3769
Latepoint <= 5.1.92 - Unauthenticated Insecure Direct Object Reference
Media
CVE-2025-30836
LatePoint <= 5.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Crítica
CVE-2024-8943
LatePoint <= 5.0.12 - Authentication Bypass
Crítica
CVE-2024-8911
LatePoint <= 5.0.11 - Unauthenticated Arbitrary User Password Change via SQL Injection
Media
CVE-2024-43992
LatePoint <= 4.9.91 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Media
CVE-2024-43945
LatePoint <= 4.9.91 - Cross-Site Request Forgery
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.