Codebangers
5 CVEs across 3 Codebangers products. Browse Codebangers vulnerabilities, severities, and proof-of-concept exploits.
Codebangers products with known CVEs
Codebangers CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-11758 | Medium | 6.5 | 2025-11-04 | The All in One Time Clock Lite plugin for WordPress is vulnerable to unauthorized access due to a missing authorization check in all versions up to, and includ… |
CVE-2025-6833 | Medium | 4.3 | 2025-10-22 | The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Insecure Direct Object Reference in all ver… |
CVE-2025-6832 | Medium | 6.1 | 2025-08-02 | The All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'non… |
CVE-2025-46513 | Medium | 4.3 | 2025-04-24 | Cross-Site Request Forgery (CSRF) vulnerability in Codebangers All in One Time Clock Lite aio-time-clock-lite allows Cross Site Request Forgery.This issue affe… |
CVE-2022-44594 | Medium | 4.8 | 2023-04-23 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Codebangers All in One Time Clock Lite plugin <= 1.3.320 versions. |