CCodebangers

Products

Exploited and recent CVEs

• CVE-2025-11758 Medium 6.5 All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0.3 - Missing Authorization to Page Creation and Information Exposure 0.3%
• CVE-2025-6833 Medium 4.3 All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Clocking In/Out 0.2%
• CVE-2025-6832 Medium 6.1 All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scripting 0.2%
• CVE-2025-46513 Medium 4.3 WordPress All in One Time Clock Lite plugin < 1.3.326 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
• CVE-2022-44594 Medium 4.8 WordPress All in One Time Clock Lite Plugin <= 1.3.320 is vulnerable to Cross Site Scripting (XSS) 0.4%