VYPR

LatePoint Plugin

by WordPress

CVEs (1)

  • CVE-2024-2472CriJun 14, 2024
    risk 0.59cvss 9.1epss 0.01

    The LatePoint Plugin plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'start_or_use_session_for_customer' function in all versions up to and including 4.9.9. This makes it possible for…