plugin
3 known security issues reported for the Clock In Portal WordPress plugin. Most recent disclosed Apr 18, 2023.
Running Clock In Portal on your site? Check whether your installed version is affected.
Scan your site freeThe Clock In Portal plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1. This is due to missing or incorrect nonce validation when deleting staff members. This makes it possible for unauthenticated attackers to delete staff members via a forged request granted they can...
The Clock In Portal plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1. This is due to missing or incorrect nonce validation on the delete action in the holidays.php file. This makes it possible for unauthenticated attackers to delete holidays via a forged request gra...
The Clock In Portal plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1. This is due to missing or incorrect nonce validation on the delete action in the designations.php file. This makes it possible for unauthenticated attackers to delete designations via a forged req...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free