WordPress security by component

All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier

Plugin description

All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Oct 22, 2025; the highest CVE/CNA score is 6.1.

Plugin slug: all-in-one-time-clock-lite-tracking-employee-time-has-never-been-easier

Latest vulnerability

CVE-2025-6833: All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier: A security weakness

All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedOct 22, 2025

Safe version guidanceSee mitigation notes

		Safe version
Oct 22, 2025	CVE-2025-6833 All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier: A security weakness All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier is affected by a security weakness. Exploitation requires an authenticated WordPress account. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVDPending
Aug 02, 2025	CVE-2025-6832 All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier: Cross-site scripting All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier is affected by cross-site scripting. The vulnerable path is reachable without authentication. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.1 NVDPending