CVE-2025-7038

Published September 30th, 2025

View on NVD ↗

CVSS v3

8.2

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

The LatePoint plugin for WordPress is vulnerable to Authentication Bypass due to insufficient identity verification within the steps__load_step route of the latepoint_route_call AJAX endpoint in all versions up to, and including, 5.1.94. The endpoint reads the client-supplied customer email and related customer fields before invoking the internal login handler without verifying login status, capability checks, or a valid AJAX nonce. This makes it possible for unauthenticated attackers to log into any customer’s account.

LatePoint – Calendar Booking Plugin for Appointments and Events

LatePoint – The Lightweight Appointment Booking Plugin for WordPress ★★★★★ <iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/s5lcrXFWQcw?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe> <a href="https://latepoint.com/changelog/?utm_source=wordpressorg&utm_medium=plugin_listing&utm_campaign=free_plugin" rel="nofollow ugc">What’s New</a> | <a href="https://wpdocs.latepoint.com/?utm_source=wordpressorg&utm_medium=plugin_listing&utm_campaign=free_plugin" rel="nofollow ugc">Docs</a> | <a href="https://www.youtube.com/watch?v=wwQ5EwEln6E&utm_source=wordpressorg&utm_medium=plugin_listing&utm_campaign=free_plugin" rel="nofollow ugc">Video Tutorial</a> | <a href="https://wpdocs.latepoint.com/support/?utm_source=wordpressorg&utm_medium=plugin_listing&utm_campaign=free_plugin" rel="nofollow ugc">Get Help</a> LatePoint is a simple yet lightweight and powerful appointment booking plugin for WordPress. Built for service-based businesses, it helps your customers book appointments in just a few clicks, without the back-and-forth emails or clunky booking systems. Whether you’re a coach, salon, consultant, or clinic, if your business runs on bookings, LatePoint makes it easy to manage your schedule, take payments, and let clients book online 24/7. Set it up in 10 minutes. Look professional. Automate the boring stuff. Let LatePoint handle the heavy lifting so you can focus on your business. <a href="https://app.zipwp.com/blueprint/latepoint-demo-m00?utm_source=wordpressorg&utm_medium=plugin_listing&utm_campaign=free_plugin" rel="nofollow ugc">Try the Live Demo</a> <h3>What You Can Do With LatePoint</h3> <ul> <li>Let customers book appointments online 24/7</li> <li>Manage your calendar and availability with ease</li> <li>Accept payments with Stripe (Braintree, Flutterwave, MercadoPago, Molie, PayPal, Paystack, RazorPay, Square, Woo, SureCart available in Pro)</li> <li>Sync with Google Calendar (Pro)</li> <li>Offer in-person or virtual sessions (Zoom/Google Meet with Pro)</li> <li>Support for multiple staff, services, and locations</li> <li>Send automatic confirmations and reminders</li> <li>Customize booking forms to collect the info you need</li> <li>Provide a customers dashboard to manage bookings (Pro)</li> <li>View and control everything from a unified admin dashboard</li> <li>Use coupons, addons, and follow-ups to boost engagement (Pro)</li> <li>Let customers book multiple appointments at once (Booking Cart – Pro)</li> </ul> <a href="https://wpastra.com/review/latepoint-review/?utm_source=wordpressorg&utm_medium=plugin_listing&utm_campaign=free_plugin" rel="nofollow ugc">LatePoint Review: Is It the Right Booking Plugin for Your Service?</a> <h3>Who Is LatePoint For?</h3> LatePoint is trusted by freelancers, studios, agencies, and small business owners across many industries. If your business runs on appointments, LatePoint can save you time and make your life easier. Salons & Studios If you run a personal care studio, hair or nail salon, spa, massage therapist or tattoo studio, you’ll know how important it is to avoid no-shows, double-bookings, and awkward payment moments. With LatePoint: <ul> <li>Customers can book online anytime</li> <li>You can send automatic reminders so clients actually show up</li> <li>Accept payments upfront or after the session</li> <li>Sync your bookings with Google Calendar</li> </ul> <a href="https://www.youtube.com/watch?v=IWbBoEyXklI&utm_source=wordpressorg&utm_medium=plugin_listing&utm_campaign=free_plugin" rel="nofollow ugc">▶️ How To Set Up LatePoint for Salons</a> Coaches, Consultants & Trainers If you run 1:1 sessions, group coaching, or online workshops, LatePoint keeps your schedule organized and sessions full. <ul> <li>Let clients pick time slots based on availability</li> <li>Offer in-person or Zoom sessions</li> <li>Sell service packages and recurring appointments</li> </ul> Clinics, Therapists & Healthcare Pros For medical, wellness, or therapy practices, LatePoint helps you stay professional while giving patients a smooth experience. <ul> <li>Collect patient information with custom fields</li> <li>Offer multiple services with different specialists</li> <li>Manage multiple staff calendars and locations</li> </ul> Education & Classes Whether you’re a tutor, language teacher, or run in-person classes, you can: <ul> <li>Let students book 1:1 or group sessions</li> <li>Limit bookings to your preferred hours</li> <li>Automate reminders and payments</li> </ul> Local Services & Agencies Photographers, cleaners, auto services, repair shops, if your business depends on appointments, LatePoint makes it simple. <ul> <li>Show real-time availability</li> <li>Set different schedules by service or team member</li> <li>Let clients book 24/7, no calls or emails needed</li> </ul> <h3>What Makes LatePoint Unique?</h3> LatePoint isn’t just another booking plugin, it’s designed to solve real-world scheduling problems with a smart, flexible approach. <ul> <li>Purpose-built for service providers: From solo pros to teams across locations, LatePoint adapts to your business.</li> <li>Quick to launch, simple to manage: The built-in onboarding wizard walks you through the entire setup. You’ll go from install to taking bookings in under 10 minutes.</li> <li>Mobile-first booking experience: Clients see clean, intuitive forms that work beautifully on phones, tablets, and desktops. Fewer clicks = fewer drop-offs.</li> <li>Automation built-in: LatePoint handles confirmations, reminders, follow-ups, and payments. Skip the admin and focus on delivering your services.</li> <li>Affordable, with a forever-free plan: You won’t get trapped in expensive subscriptions. Start with the free version, and upgrade when you need advanced features.</li> <li>Native to WordPress: Built to feel like a natural part of your site, LatePoint works with most popular themes and page builders out of the box.</li> </ul> <h3>How It Works</h3> <ol> <li>Install the plugin: Download LatePoint from the WordPress plugin repository and activate it on your site.</li> <li>Complete the setup wizard: Walk through a simple onboarding process to set your timezone, services, staff, and availability.</li> <li>Customize your booking form: Add custom fields to collect the information you need before a session. Choose which details to make required or optional.</li> <li>Add booking to your site: Use a shortcode or LatePoint widget to place the booking interface into any page or post.</li> <li>Start accepting bookings: Customers can now see your real-time availability, book appointments, pay (Pro), and receive confirmation emails.</li> <li>Manage everything in your dashboard: View and manage appointments, customer information, payments, and notifications directly from your WordPress admin.</li> </ol> <a href="https://wpdocs.latepoint.com/getting-started-with-latepoint/?utm_source=wordpressorg&utm_medium=plugin_listing&utm_campaign=free_plugin" rel="nofollow ugc">Follow the Step-by-Step Guide</a> <h3>Features You’ll Love</h3> ✅ Visual booking form builder – Customize steps, services, and fields without touching code ✅ Multi-step appointment scheduling – Clean, intuitive customer experience ✅ Multiple services, agents & locations – Set schedules, prices, and availability per agent or location ✅ Customer dashboard – Customers can view and manage bookings, cancel and reschedule ✅ Admin dashboard – Full calendar view with filters for appointments, agents, and locations ✅ Google Calendar sync – Keep everything up to date across platforms ✅ Built-in notifications – Email, SMS, and WhatsApp notifications out of the box ✅ Online payments – Connect Stripe or PayPal to accept payments during booking ✅ Booking cart – Let customers book multiple appointments at once <h3>Want To Unlock More?</h3> LatePoint comes with a solid set of features in the free version, perfect if you’re just getting started. But if you’re managing multiple team members, need advanced scheduling logic, or want to offer online payments and video calls, the Pro version gives you that extra power. Here’s what you unlock with LatePoint Pro: <ul> <li>Add unlimited agents and services</li> <li>Accept payments using other methods, such as PayPal</li> <li>Zoom and Google Meet integration</li> <li>Set up advanced availability rules and service durations</li> <li>Send custom reminders and follow-ups</li> <li>Support for deposits, coupons, and recurring bookings</li> </ul> <a href="https://docs.google.com/spreadsheets/d/1AcjnUEKGhM0ySAgm7ZKRt-PSqlJ05eZk1JiuL5ToGRs/edit?usp=sharing" rel="nofollow ugc">See the Full Free vs Pro Feature Comparison</a> <a href="https://latepoint.com/pricing/?utm_source=wordpressorg&utm_medium=plugin_listing&utm_campaign=free_plugin" rel="nofollow ugc">Check Out LatePoint Pro</a> <h3>Works With Your Stack</h3> <ul> <li>Works with most Popular WordPress themes (Astra, Kadence, GeneratePress and others)</li> <li>Fully compatible with Elementor, Gutenberg, and page builders</li> <li>LatePoint is compatible with WooCommerce but doesn’t need it to work</li> <li>Extendable with official LatePoint add-ons (Zoom, WhatsApp, Packages, etc.)</li> </ul> <h3>Blocks</h3> This plugin provides 6 blocks. <ul> <li>Customer dashboard: Adds a customer dashboard for LatePoint</li> <li>Booking button: Adds a booking button</li> <li>List of resources: Adds a list of bookable resources by type</li> <li>Booking form: Adds a LatePoint booking form</li> <li>Customer login: Adds a customer login form</li> <li>Latepoint calendar: Adds a calendar of events</li> </ul> <h3>Trusted by 21,000+ Businesses</h3> LatePoint has over 1,300 five-star reviews and is trusted by businesses worldwide, including the Nigerian Embassy, fitness chains, and solo freelancers. If you want a modern, effortless way to let your customers book online, give LatePoint a try today.

WordPress Plugin Directory

1.16M