{"items":[{"id":"CVE-2025-11758","published":"2025-11-04T04:27:15.403Z","updated":"2026-04-08T16:43:03.290Z","title":"All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0.3 - Missing Authorization to Page Creation and Information Exposure","severity":"MEDIUM","score":6.5,"vendor":"codebangers","product":"All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2025-6833","published":"2025-10-22T09:24:37.989Z","updated":"2026-04-08T17:21:16.399Z","title":"All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Clocking In/Out","severity":"MEDIUM","score":4.3,"vendor":"codebangers","product":"All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier","kev":false,"epss":0.00195,"kevAdded":null},{"id":"CVE-2025-6832","published":"2025-08-02T08:24:47.167Z","updated":"2026-04-08T17:04:21.783Z","title":"All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0 - Reflected Cross-Site Scripting","severity":"MEDIUM","score":6.1,"vendor":"codebangers","product":"All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier","kev":false,"epss":0.00236,"kevAdded":null},{"id":"CVE-2025-46513","published":"2025-04-24T16:09:14.256Z","updated":"2026-04-28T16:12:39.649Z","title":"WordPress All in One Time Clock Lite plugin < 1.3.326 - Cross Site Request Forgery (CSRF) Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Codebangers","product":"All in One Time Clock Lite","kev":false,"epss":0.00153,"kevAdded":null},{"id":"CVE-2022-44594","published":"2023-04-23T09:02:00.078Z","updated":"2026-04-28T16:07:51.354Z","title":"WordPress All in One Time Clock Lite Plugin <= 1.3.320 is vulnerable to Cross Site Scripting (XSS)","severity":"MEDIUM","score":4.8,"vendor":"Codebangers","product":"All in One Time Clock Lite","kev":false,"epss":0.00392,"kevAdded":null}]}