Skip to content
PluginCanary

Appointment Booking Plugin - LatePoint | Calendar & Scheduling for WordPress

by LatePoint · 100,000+ active installs · Checked 3 Nov 2026
Healthy18 Warnings

Healthy: vulnerability published 19 Oct 2026, fixed in 5.7.5.

81/ 100 Canary Score
Sub-scores for Appointment Booking Plugin - LatePoint | Calendar & Scheduling for WordPress
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 5.7.5. Update to version 5.7.5 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 19 Oct 2026, fixed in 5.7.5. Update to version 5.7.5 or later.19 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 16 Oct 2026, fixed in 5.7.5. Update to version 5.7.5 or later.16 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 16 Oct 2026, fixed in 5.7.5. Update to version 5.7.5 or later.16 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 5.7.3. Update to version 5.7.3 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 5.7.4. Update to version 5.7.4 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 13 Oct 2026, fixed in 5.7.4. Update to version 5.7.4 or later.13 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 5.7.3. Update to version 5.7.3 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 5.7.4. Update to version 5.7.4 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 5.7.3. Update to version 5.7.3 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 5.6.5. Update to version 5.6.5 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 5.6.9. Update to version 5.6.9 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 8 Oct 2026, fixed in 5.7.3. Update to version 5.7.3 or later.8 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 7 Oct 2026, fixed in 5.6.10. Update to version 5.6.10 or later.7 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 1 Oct 2026, fixed in 5.7.2. Update to version 5.7.2 or later.1 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 30 Sep 2026, fixed in 5.7.1. Update to version 5.7.1 or later.30 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 17 Sep 2026, fixed in 5.6.4. Update to version 5.6.4 or later.17 Sep 2026Evidence
  • WarningSEC-1Vulnerability published 17 Sep 2026, fixed in 5.6.10. Update to version 5.6.10 or later.17 Sep 2026Evidence
  • InfoSEC-351 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
plugin-master19 Jan 2025 to 19 Jan 2025, 1 commits
latepoint29 Jan 2025 to 3 Nov 2026, 60 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
yesterday
Releases, 24 months
56
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Appointment Booking Plugin - LatePoint | Calendar & Scheduling for WordPress
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 202512
Q2 20251
Q3 20255
Q4 20252
Q1 20269
Q2 202611
Q3 202611
Q4 20265

Last release 3 Nov 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
19 Oct 2026LatePoint <= 5.7.4 - Unauthenticated Payment Bypass5.3<= 5.7.45.7.50
19 Oct 2026LatePoint <= 5.7.4 - Authenticated (Agent+) Insecure Direct Object Reference4.3<= 5.7.45.7.50
16 Oct 2026Appointment Booking Plugin <= 5.7.4 - Unauthenticated Sensitive Information Disclosure via ORM Operator Injection in 'customer[uuid]' Parameter3.7<= 5.7.45.7.50
16 Oct 2026Appointment Booking Plugin <= 5.7.4 - Unauthenticated Authentication Bypass via Race Condition on OTP Attempts Counter9.1<= 5.7.45.7.50
13 Oct 2026Appointment Booking Plugin <= 5.7.2 - Unauthenticated Authentication Bypass to Customer Account Takeover via Insufficient Verification in create_wp_user_for_customer() username_exists Fallback7.4<= 5.7.25.7.30
13 Oct 2026Appointment Booking Plugin <= 5.7.3 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'booking[id]' and 'cart[id]' Parameters7.5<= 5.7.35.7.40
13 Oct 2026Appointment Booking Plugin <= 5.7.3 - Authenticated (Subscriber+) Sensitive Information Exposure in 'first_name' Parameter Template Re-expansion4.3<= 5.7.35.7.40
9 Oct 2026Appointment Booking Plugin <= 5.7.2 - Unauthenticated SQL Injection via 'booking[service_id]' Parameter7.5<= 5.7.25.7.30
9 Oct 2026Appointment Booking Plugin <= 5.7.3 - Authenticated (Custom+) Privilege Escalation to 'settings[default_wp_role_for_customer]' Parameter8.8<= 5.7.35.7.40
9 Oct 2026Appointment Booking Plugin <= 5.7.2 - Insecure Direct Object Reference to Authenticated (Subscriber+) Unauthorized Booking Creation and Sensitive Information Disclosure via 'params[presets][order_item_id]' Parameter4.3<= 5.7.25.7.30
8 Oct 2026Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress < 5.6.9 - Authenticated (Custom Role+) Insecure Direct Object Reference4.3< 5.6.95.6.90
8 Oct 2026Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress < 5.7.3 - Unauthenticated Insecure Direct Object Reference5.3< 5.7.35.7.30
8 Oct 2026Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress < 5.6.5 - Authenticated (Custom Role+) Insecure Direct Object Reference4.3< 5.6.55.6.50
7 Oct 2026Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress <= 5.6.9 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Customer PII Modification5.4<= 5.6.95.6.100
1 Oct 2026Appointment Booking Plugin <= 5.7.1 - Insecure Direct Object Reference to Unauthenticated Unauthorized Transaction Intent Creation/Modification and Invoice Enumeration via 'invoice_id' Parameter5.3<= 5.7.15.7.20
30 Sep 2026Appointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field9.1<= 5.7.05.7.10
17 Sep 2026LatePoint <= 5.6.3 - Authenticated (Custom+) Insecure Direct Object Reference to Arbitrary Booking Deletion and Customer/Booking Data Disclosure via Abilities REST API (list-bookings, list-customers, delete-booking)4.3<= 5.6.35.6.40
17 Sep 2026LatePoint - Appointment Booking & Scheduling <= 5.6.9 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Disclosure via 'customer[id]' Parameter4.3<= 5.6.95.6.100
5 Aug 2026LatePoint <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4<= 5.3.25.4.00
10 Jul 2026LatePoint <= 5.6.7 - Missing Authorization to Unauthenticated Booking Object Mass Assignment5.3<= 5.6.75.6.80
8 Jul 2026Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress <= 5.6.3 - Unauthenticated SQL Injection7.5<= 5.6.35.6.40
7 Jul 2026LatePoint - Calendar Booking Plugin for Appointments and Events <= 5.4.0 - Unauthenticated Stripe PaymentIntent Amount-Binding Bypass7.5<= 5.4.05.4.10
2 Jul 2026LatePoint <= 5.6.1 - Missing Authorization to Unauthenticated Arbitrary Customer Data Modification via process_step_customer() Booking Form Customer Step5.3<= 5.6.15.6.20
1 Jul 2026LatePoint <= 5.6.2 - Unauthenticated Insecure Direct Object Reference to Arbitrary Creation via 'service_id' Parameter5.3<= 5.6.25.6.30
30 Jun 2026LatePoint <= 5.6.3 - Authenticated (Custom+) Privilege Escalation to Administrator via 'order[customer_id]' Parameter8.8<= 5.6.35.6.40

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Appointment Booking Plugin - LatePoint | Calendar & Scheduling for WordPress
Q2 20264.9
Q3 20265.0
Q4 20265.0

Average rating rose from 4.9 to 5.0 between Q2 2026 and Q4 2026.

Rating distribution
5 star103
4 star2
3 star0
2 star0
1 star2

Momentum

100,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Appointment Booking Plugin - LatePoint | Calendar & Scheduling for WordPress
4 May 202610,604
11 May 202634,594
18 May 202642,502
25 May 202634,177
1 Jun 202612,020
8 Jun 202614,190
15 Jun 202633,478
22 Jun 202632,701
29 Jun 202678,402
6 Jul 202661,942
13 Jul 202632,442
20 Jul 202617,725
27 Jul 202626,020
3 Aug 202620,581
10 Aug 20267,993
17 Aug 20267,127
24 Aug 202610,293
31 Aug 202633,332
7 Sep 20268,710
14 Sep 202635,837
21 Sep 202659,206
28 Sep 202634,384
5 Oct 202640,197
12 Oct 202635,059
19 Oct 202611,823
26 Oct 202638,979
2 Nov 202619,382

Weekly downloads over the last 4 weeks are 10% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

SimplyBook.me - Booking and reservations calendarScore 91 · 30,000+MotoPress Hotel Booking for ElementorScore 91 · 10,000+MotoPress Hotel Booking Styles & TemplatesScore 91 · 10,000+SetmoreScore 91 · 4,000+Zenchef widget integrationScore 91 · 2,000+

Facts

Version5.7.8
AuthorLatePoint
Added29 Jan 2025
Last updated3 Nov 2026
Active installs100,000+
Requires WordPress6.5
Tested up to7.1.4
Requires PHP7.4
CategoryBookings & Scheduling > Appointment Scheduling
Tagsscheduling, booking system, appointment booking, event booking system, appointment scheduling

Questions

Is Appointment Booking Plugin - LatePoint | Calendar & Scheduling for WordPress still maintained?

Appointment Booking Plugin - LatePoint | Calendar & Scheduling for WordPress was last updated on 3 Nov 2026. Its Canary status is Healthy.

Is Appointment Booking Plugin - LatePoint | Calendar & Scheduling for WordPress safe?

Appointment Booking Plugin - LatePoint | Calendar & Scheduling for WordPress has no open unpatched vulnerabilities on record. 51 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Appointment Booking Plugin - LatePoint | Calendar & Scheduling for WordPress?

The wordpress.org author is LatePoint. Recent committers: latepoint, plugin-master. We have recorded no ownership change.

What can I use instead of Appointment Booking Plugin - LatePoint | Calendar & Scheduling for WordPress?

Plugins in the same category with a higher Canary Score: SimplyBook.me - Booking and reservations calendar, MotoPress Hotel Booking for Elementor, MotoPress Hotel Booking Styles & Templates, Setmore, Zenchef widget integration.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue