CVE-2024-9593

🗓️ 18 Oct 2024 17:32:30Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 83 Views🌐 WEB

Time Clock and Time Clock Pro plugins for WordPress are vulnerable to Remote Code Execution in versions up to 1.2.2 and 1.1.4 respectivel

Reporter	Title	Published	Views	Family All 15
GithubExploit	Exploit for Code Injection in Wpplugin Time_Clock	18 Oct 202409:11	–	githubexploit
Circl	CVE-2024-9593	18 Oct 202421:05	–	circl
CNNVD	WordPress plugin Time Clock plugin and Time Clock Pro 代码注入漏洞	18 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-9593 Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution	18 Oct 202417:32	–	cvelist
Nuclei	Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Remote Code Execution	1 Jun 202605:38	–	nuclei
NVD	CVE-2024-9593	18 Oct 202418:15	–	nvd
Patchstack	WordPress Time Clock Plugin <= 1.2.2 is vulnerable to Remote Code Execution (RCE)	18 Oct 202400:00	–	patchstack
Patchstack	WordPress Time Clock plugin <= 1.2.2 - Unauthenticated (Limited) Remote Code Execution vulnerability	18 Oct 202405:53	–	patchstack
Patchstack	WordPress Time Clock Pro Plugin <= 1.1.4 is vulnerable to Remote Code Execution (RCE)	18 Oct 202400:00	–	patchstack
Patchstack	WordPress Time Clock Pro plugin <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution vulnerability	18 Oct 202405:54	–	patchstack

NVD

Vulners

Vulnrichment

Node

wpplugin time_clockRange≤1.1.4prowordpress

wpplugin time_clockRange≤1.2.2-wordpress

[
  {
    "vendor": "Scott Paterson",
    "product": "Time Clock Pro",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "scottpaterson",
    "product": "Time Clock – A WordPress Employee & Volunteer Time Clock Plugin",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.2.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/time-clock/tags/1.2.2/includes/admin/ajax_functions_admin.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/247e599a-74e2-41d5-a1ba-978a807e6544
plugins	www.plugins.trac.wordpress.org/changeset/3171046/time-clock

Parameter	Position	Path	Description	CWE
function	request body	wp-admin/admin-ajax.php	Unauthenticated remote code execution via etimeclockwp_load_function_callback in Time Clock/Time Clock Pro plugins	CWE-94

08 Apr 2026 16:42Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.3

EPSS0.85505

SSVC

CWE-94

In Wild