Read the docs

codebangers

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

codebangers records in CISA KEV

No codebangers vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
All In One Time Clock Lite 1 record LOW

Records

5 records

TI-2025-06206 CVE-2025-6832 · GHSA-f98w-r93j-6c74

All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scripting

Priority LOW 27

The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 2.0 due t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00236 Published 2025-08-02 No fix listed CWE-79
TI-2025-29231 CVE-2025-46513 · GHSA-jg69-5w5h-x3pf

WordPress All in One Time Clock Lite plugin < 1.3.326 - Cross Site Request Forgery (CSRF) Vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Codebangers All in One Time Clock Lite aio-time-clock-lite allows Cross Site Request Forgery.This issue affects All in One Time Clock Lite: from n/a through < 1.3.326.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00153 Published 2025-04-24 No fix listed CWE-352
TI-2025-06207 CVE-2025-6833 · GHSA-342p-f7r9-8cjx

Authorization bypass in codebangers All in One Time Clock Lite – Tracking Employee Time…

Priority LOW 19

The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0 via the 'aio_time_clock_lite_…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00195 Published 2025-10-22 No fix listed CWE-639
Open these records in search →