CVE-2023-0761

The CVE-2023-0761 entry concerns a CSRF vulnerability in the Clock In Portal – Staff & Attendance Management WordPress plugin (versions

CVE-2023-0763

CVE-2023-0763 concerns the Clock In Portal – Staff & Attendance Management WordPress plugin (≤ v2.1). The vulnerability stems from a missing CSRF check when deleting Holidays, enabling a logged-in attacker to trigger a CSRF attack that could cause admins to delete arbitrary holidays. The provided...

CVE-2023-0762

CVE-2023-0762 affects the Clock In Portal - Staff & Attendance Management WordPress plugin (versions up to 2.1). The issue is a lack of CSRF protection when deleting designations, which could allow a logged-in attacker to cause admins to delete designations via CSRF. Public vulnerability records ...