SQL Injection

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. LatePoint <= 5.0.11 - SQL InjectionCVE-2024-8911latepoint · CVSS 9.8 · 2.9% likely

   CWE-89

2. WordPress LatePoint plugin <= 5.6.3 - SQL Injection vulnerabilityCVE-2026-57714LatePoint · CVSS 9.3 · 0.4% likely

   CWE-89

3. Appointment Booking Plugin <= 5.7.2 - Unauthenticated SQL Injection via 'booking[service_id]' ParameterCVE-2026-96662latepoint · CVSS 7.5 · 0.4% likely

   CWE-89

4. LatePoint <= 5.2.7 - Authenticated (Administrator+) SQL Injection via JSON ImportCVE-2026-1487latepoint · CVSS 6.5 · 0.4% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.