Codebangers - vulnerabilities (CVEs)
5 CVEs in 2 products, 0 in the last 30 days, newest from 2025-11-04.
Products
- All In One Time Clock Lite Tracking Employee Time Has Never Been Easier - 3 CVEs
- All In One Time Clock Lite - 2 CVEs
Newest CVEs of Codebangers
- CVE-2025-11758 - CVSS 6.5 (medium), 2025-11-04: The All in One Time Clock Lite plugin for WordPress is vulnerable to unauthorized access due to a missing authorization check in all versions up to, and…
- CVE-2025-6833 - CVSS 4.3 (medium), 2025-10-22: The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Insecure Direct Object Reference in all…
- CVE-2025-6832 - CVSS 6.1 (medium), 2025-08-02: The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…
- CVE-2025-46513 - CVSS 4.3 (medium), 2025-04-24: Cross-Site Request Forgery (CSRF) vulnerability in Codebangers All in One Time Clock Lite aio-time-clock-lite allows Cross Site Request Forgery.This issue…
- CVE-2022-44594 - CVSS 4.8 (medium), 2023-04-23: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Codebangers All in One Time Clock Lite plugin <= 1.3.320 versions.
