Unknown Appointment Booking Plugin

• CVE-2026-105258 Low 3.5 LatePoint < 5.7.6 - Admin+ Stored XSS via Booking Form Step Settings 0.2%
• CVE-2026-105257 Low 2.7 LatePoint < 5.7.5 - Agent+ Customer PII Disclosure via IDOR 0.3%
• CVE-2026-105198 Medium 5.3 LatePoint < 5.7.3 - Unauthenticated Customer PII Disclosure via IDOR 0.2%
• CVE-2026-105197 Low 2.7 LatePoint < 5.6.5 - Agent+ Arbitrary Order, Customer and Transaction Deletion via IDOR 0.2%
• CVE-2026-105196 Low 3.3 LatePoint < 5.6.9 - Agent+ Cross-Agent Data Disclosure and Modification via Abilities API 0.1%
• CVE-2026-15250 Medium 5.3 LatePoint < 5.6.8 - Unauthenticated Booking Object Mass Assignment via Public Booking Funnel 0.3%
• CVE-2026-11866 Medium 5.4 LatePoint < 5.6.3 - Multiple Privileged Actions via CSRF 0.1%