WordPress plugin
ShiftController Employee Shift Scheduling security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 6 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium4
- Low0
All ShiftController Employee Shift Scheduling vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Authenticated (Contributor+) PHP Object Injection ≤4.9.57Update to 4.9.58 | CVE-2024-4733 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting via 'hc-title' ≤4.9.23Update to 4.9.24 | CVE-2023-29424 |
- High7.5Authenticated (Contributor+) PHP Object Injection
≤4.9.57Update to 4.9.58
- High7.2Unauthenticated Stored Cross-Site Scripting via 'hc-title'
≤4.9.23Update to 4.9.24
ShiftController Employee Shift Scheduling: common questions
Does ShiftController Employee Shift Scheduling have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in ShiftController Employee Shift Scheduling: 2 high, 4 medium. None are known to affect version null.
How do I check which version of ShiftController Employee Shift Scheduling I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent ShiftController Employee Shift Scheduling vulnerability?
CVE-2024-9435, published Oct 3, 2024: ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any ShiftController Employee Shift Scheduling vulnerability listed in CISA KEV?
No. None of the known ShiftController Employee Shift Scheduling vulnerabilities is currently listed in the CISA KEV catalog.