Now officially on WordPress.org

CVE Database / CVE-2026-57714

CVE · Critical

CVE-2026-57714 — Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.6.4

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-57714 Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress [latepoint] < 5.6.4 — Critical 9.3 < 5.6.4 5.6.4 2026-07-08 —

CVE-2026-57714

The LatePoint plugin for WordPress contains a security flaw in versions 5.6.3 and earlier, allowing malicious input to compromise database integrity by injecting unauthorized SQL code into legitimate queries. This vulnerability stems from inadequate protection of user-submitted data within SQL statements. As a result, attackers can potentially extract sensitive information without authentication.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings