All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier
All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 5 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.5 out of 10. 2025 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Cross-Site Request Forgery (CSRF).
Every one of the 5 issues recorded for All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier has a vendor fix available, so running the current release closes all known holes.
4 independent researchers contributed these findings, most of them (2) reported by Jonas Benjamin Friedli. All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-11758All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0.3 - Missing Authorization to Page Creation and Information Exposure
Read the full analysisVulnerability Records

All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier
Author
Codebangers
Employees can easily clock in and out. Managers can run reports, keep track of employees/volunteers/contractors and their time. Need Support? We can help: Portal Features Keep track of employee, contractor and volunteer shifts Generate custom reports Manage employee departments and wages Easily create and edit shifts Supports all timezones View employee activity in real time Includes handy dandy time clock widget Pro Features Use the Live Time Clock or Have Employees Select From Predefined Shifts to Clock in/out Employee and Mangers Profile Multiple Time Clock Layouts Add your own custom roles for time clock access Simple/Advanced Shift Reports Includes Manager/Employee/Volunteer/Contractor profiles Automatically clear out shifts Export Shifts to Spreadsheet/CSV Manage Wages Supports Shift History Supports Dynamic and Static Time Zones Monthly/Yearly Charts Compatible with Quickbooks Supports Unlimited Clock in Locations Supports Google Analytics Supports Employee IP Address and GPS Tracking (includes tracking map) Imports/Export Shifts, Locations, and more for backups and migration Includes Time Clock Widget Custom Error Log Supports Multi Site Extensions that allow you do even more Learn More About All in Time Clock Pro Use coupon code “timeclockpro”
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C