All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier

All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; all 5 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.5 out of 10. 2025 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (40%). Other recurring categories include Authorization Bypass Through User-Controlled Key, Cross-Site Request Forgery (CSRF).

Every one of the 5 issues recorded for All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (2) reported by Jonas Benjamin Friedli. All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

5

Get automatic notifications for all All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2025-11758

All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier <= 2.0.3 - Missing Authorization to Page Creation and Information Exposure

Read the full analysis

Vulnerability Records

5 records
All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier banner
Latestv2.1.0

All in One Time Clock Lite – Tracking Employee Time Has Never Been Easier

Codebangers

Author

Codebangers

4.6(8)
92/100
Last Updated
2026-08-23 (20d ago)
Active Installs
600+
Downloads
33,909
Requires WP
5.0+
Requires PHP
7.1+
Tested up to
WP 7.1
Created
2018-06-07 (8y ago)

Employees can easily clock in and out. Managers can run reports, keep track of employees/volunteers/contractors and their time. Need Support? We can help: Portal Features Keep track of employee, contractor and volunteer shifts Generate custom reports Manage employee departments and wages Easily create and edit shifts Supports all timezones View employee activity in real time Includes handy dandy time clock widget Pro Features Use the Live Time Clock or Have Employees Select From Predefined Shifts to Clock in/out Employee and Mangers Profile Multiple Time Clock Layouts Add your own custom roles for time clock access Simple/Advanced Shift Reports Includes Manager/Employee/Volunteer/Contractor profiles Automatically clear out shifts Export Shifts to Spreadsheet/CSV Manage Wages Supports Shift History Supports Dynamic and Static Time Zones Monthly/Yearly Charts Compatible with Quickbooks Supports Unlimited Clock in Locations Supports Google Analytics Supports Employee IP Address and GPS Tracking (includes tracking map) Imports/Export Shifts, Locations, and more for backups and migration Includes Time Clock Widget Custom Error Log Supports Multi Site Extensions that allow you do even more Learn More About All in Time Clock Pro Use coupon code “timeclockpro”

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C