CVE-2026-4785

The CVE-2026-4785 entry describes a Stored Cross-Site Scripting (Stored XSS) in the WordPress LatePoint plugin (LatePoint – Calendar Booking Plugin for Appointments and Events) up to version 5.3.0. The vulnerability arises from insufficient output escaping in the shortcode [latepoint_resources] w...

PT-2025-39955

Name of the Vulnerable Software and Affected Versions LatePoint – Calendar Booking Plugin for Appointments and Events versions through 5.1.94 Description The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is...