Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown
CVE-2023-0763
Disclosure Date: May 15, 2023 (last updated February 24, 2025)
The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting Holidays, which could allow attackers to make logged in admins delete arbitrary holidays via a CSRF attack
0
Attacker Value
Unknown
CVE-2023-0762
Disclosure Date: May 15, 2023 (last updated October 08, 2023)
The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting designations, which could allow attackers to make logged in admins delete arbitrary designations via a CSRF attack
0
Attacker Value
Unknown
CVE-2023-0761
Disclosure Date: May 15, 2023 (last updated October 08, 2023)
The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting Staff members, which could allow attackers to make logged in admins delete arbitrary Staff via a CSRF attack
0
