Clockinator Lite

Clockinator Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Clockinator Lite has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Kévin Mosbahi (Mika). Clockinator Lite is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Clockinator Lite vulnerabilities before they are exploited.

Most severe open issueCVSS 5.3CVE-2025-31777

Clockinator Lite <= 1.0.7 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Clockinator Lite banner
Latestv1.0.9

Clockinator Lite

BeastThemes

Author

BeastThemes

5.0(2)
100/100
Last Updated
2026-03-28 (6mo ago)
Active Installs
90+
Downloads
7,859
Requires WP
5.0+
Requires PHP
7.0+
Tested up to
WP 6.9.7
Created
2021-03-03 (6y ago)

Clockinator Lite is a powerful and easy-to-use employee and attendance management plugin for WordPress. It helps you manage attendance, employee records, shifts, and holidays from your WordPress dashboard. Core Lite Features Employee management for administrator and employee roles Clock in/out with attendance history Shift and holiday management Department and designation management Monthly and past attendance reports Frontend employee dashboard Translation-ready interface And many other features Clockinator Lite is suitable for small and medium teams that need a practical attendance workflow in WordPress. 🔑 Key Features (Lite Version) User Management (Admin / Employee) Attendance & Holiday Management Real-time employee tracking Monthly & past attendance reports Admin notifications on clock in/out ( Email & SMS notifications ) Employee self-service frontend dashboard Centralized admin dashboard Clean UI & translation ready And many other features 🚀 Upgrade to Pro Unlock advanced HR features with Clockinator Pro, including: – Shift, leave, payroll & reimbursement management – Project & task management – Payslip & Payroll generation( partial & monthly wise ) – Exportable reports (CSV) – Customizable email/SMS notifications – Department & role-based access control – Frontend Dashboard for “Administrator” with all backend functionalities Addon – More robust dashboards for HR Managers & Department Heads 👉 Learn More 👉 View Demo 👉 Buy Now Short Description A complete HR and attendance management plugin for WordPress with clock in/out, shift tracking, leave management, and employee dashboards. License Clockinator Lite WordPress plugin, Copyright (C) 2021 Beastthemes Licensed under the GPL3 (https://www.gnu.org/licenses/gpl-3.0.en.html).

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C