Codebangers vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20254

Newest CVEs

• CVE-2025-11758

  All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0.3 - Missing Authorization to Page Creation and Information Exposure

  codebangers · All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier

  Medium6.5
• CVE-2025-6833

  All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Clocking In/Out

  codebangers · All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier

  Medium4.3
• CVE-2025-6832

  All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scripting

  codebangers · All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier

  Medium6.1
• CVE-2025-46513

  WordPress All in One Time Clock Lite plugin < 1.3.326 - Cross Site Request Forgery (CSRF) Vulnerability

  Codebangers · All in One Time Clock Lite

  Medium4.3
• CVE-2022-44594

  WordPress All in One Time Clock Lite Plugin <= 1.3.320 is vulnerable to Cross Site Scripting (XSS)

  Codebangers · All in One Time Clock Lite

  Medium4.8