Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Codebangers vulnerabilities

5 published CVEs name Codebangers among the affected products.

Newest CVEs

  • CVE-2025-11758

    All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0.3 - Missing Authorization to Page Creation and Information Exposure

    codebangers · All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier

    Medium6.5
  • CVE-2025-6833

    All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Clocking In/Out

    codebangers · All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier

    Medium4.3
  • CVE-2025-6832

    All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scripting

    codebangers · All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier

    Medium6.1
  • CVE-2025-46513

    WordPress All in One Time Clock Lite plugin < 1.3.326 - Cross Site Request Forgery (CSRF) Vulnerability

    Codebangers · All in One Time Clock Lite

    Medium4.3
  • CVE-2022-44594

    WordPress All in One Time Clock Lite Plugin <= 1.3.320 is vulnerable to Cross Site Scripting (XSS)

    Codebangers · All in One Time Clock Lite

    Medium4.8