CVE Explorer
CVE-2025-7038
The LatePoint plugin for WordPress is vulnerable to Authentication Bypass due to insufficient identity verification within the steps__load_step route of the latepoint_route_call AJAX endpoint in all versions up to, and including, 5.1.94. The endpoint reads the client-supplied customer email and related customer fields before invoking the internal login handler without verifying login status, capability checks, or a valid AJAX nonce. This makes it possible for unauthenticated attackers to log int
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"defaultStatus":"unaffected","product":"LatePoint – Calendar Booking Plugin for Appointments and Events","vendor":"latepoint","versions":[{"lessThanOrEqual":"5.1.94","status":"affected","version":"0","versionType":"semver"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:f9cee8efc257e689ff9bf511ff578be641a7e914dfd7bc28c1ea6f9a366f3d68 · sha256:2437aad0b6efddb0… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"baseScore":8.2,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:f9cee8efc257e689ff9bf511ff578be641a7e914dfd7bc28c1ea6f9a366f3d68 · sha256:2437aad0b6efddb0… · /containers/cna/metrics/0/cvssV3_1
CWE assertions
1 source assertion{"cweId":"CWE-288","description":"CWE-288 Authentication Bypass Using an Alternate Path or Channel","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:f9cee8efc257e689ff9bf511ff578be641a7e914dfd7bc28c1ea6f9a366f3d68 · sha256:2437aad0b6efddb0… · /containers/cna/problemTypes/0/descriptions/0
Source references
5 source assertions{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.1.93/latepoint.php"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:f9cee8efc257e689ff9bf511ff578be641a7e914dfd7bc28c1ea6f9a366f3d68 · sha256:2437aad0b6efddb0… · /containers/cna/references/2
{"url":"https://plugins.trac.wordpress.org/browser/latepoint/tags/5.1.93/lib/controllers/steps_controller.php"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:f9cee8efc257e689ff9bf511ff578be641a7e914dfd7bc28c1ea6f9a366f3d68 · sha256:2437aad0b6efddb0… · /containers/cna/references/3
{"url":"https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3366851%40latepoint&new=3366851%40latepoint&sfp_email=&sfph_mail="}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:f9cee8efc257e689ff9bf511ff578be641a7e914dfd7bc28c1ea6f9a366f3d68 · sha256:2437aad0b6efddb0… · /containers/cna/references/4
{"url":"https://wordpress.org/plugins/latepoint/#developers"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:f9cee8efc257e689ff9bf511ff578be641a7e914dfd7bc28c1ea6f9a366f3d68 · sha256:2437aad0b6efddb0… · /containers/cna/references/1
{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/d7389e17-a357-481a-8716-3a93cb6afa7c?source=cve"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:f9cee8efc257e689ff9bf511ff578be641a7e914dfd7bc28c1ea6f9a366f3d68 · sha256:2437aad0b6efddb0… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.