Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Clock_in_portal\-_staff_\&_attendance_management
(Infigosoftware)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 3 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2023-05-15 | CVE-2023-0761 | The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting Staff members, which could allow attackers to make logged in admins delete arbitrary Staff via a CSRF attack | Clock_in_portal\-_staff_\&_attendance_management | 4.3 | ||
| 2023-05-15 | CVE-2023-0762 | The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting designations, which could allow attackers to make logged in admins delete arbitrary designations via a CSRF attack | Clock_in_portal\-_staff_\&_attendance_management | 4.3 | ||
| 2023-05-15 | CVE-2023-0763 | The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting Holidays, which could allow attackers to make logged in admins delete arbitrary holidays via a CSRF attack | Clock_in_portal\-_staff_\&_attendance_management | 4.3 |