WordPress plugin

Clock In Portal- Staff & Attendance Management security & vulnerabilities

Q: Is any Clock In Portal- Staff & Attendance Management vulnerability listed in CISA KEV?

No. None of the known Clock In Portal- Staff & Attendance Management vulnerabilities is currently listed in the CISA KEV catalog.

clock-in-portal— active installsLast vulnerability Apr 18, 2023

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

3Known vulnerabilities

Critical0
High0
Medium3
Low0

Vulnerabilities per year

All Clock In Portal- Staff & Attendance Management vulnerabilities

Clock In Portal- Staff & Attendance Management vulnerabilities
Severity	Vulnerability	CVE	Published
Medium4.3	Cross-Site Request Forgery To Staff Deletion ≤2.1No patch available	CVE-2023-0761	Apr 18, 2023
Medium4.3	Cross-Site Request Forgery to Holidays Deletion ≤2.1No patch available	CVE-2023-0763	Apr 18, 2023
Medium4.3	Cross-Site Request Forgery to Designation Deletion ≤2.1No patch available	CVE-2023-0762	Apr 18, 2023

Medium4.3
Cross-Site Request Forgery To Staff Deletion
≤2.1No patch available
CVE-2023-0761Apr 18, 2023
Medium4.3
Cross-Site Request Forgery to Holidays Deletion
≤2.1No patch available
CVE-2023-0763Apr 18, 2023
Medium4.3
Cross-Site Request Forgery to Designation Deletion
≤2.1No patch available
CVE-2023-0762Apr 18, 2023

Clock In Portal- Staff & Attendance Management: common questions

Does Clock In Portal- Staff & Attendance Management have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in Clock In Portal- Staff & Attendance Management: 3 medium. At least one is not fixed in the latest version.

How do I check which version of Clock In Portal- Staff & Attendance Management I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Clock In Portal- Staff & Attendance Management vulnerability?

CVE-2023-0761, published Apr 18, 2023: Clock In Portal <= 2.1 - Cross-Site Request Forgery To Staff Deletion. Severity: Medium (CVSS 4.3).

Is any Clock In Portal- Staff & Attendance Management vulnerability listed in CISA KEV?

No. None of the known Clock In Portal- Staff & Attendance Management vulnerabilities is currently listed in the CISA KEV catalog.