Clockinator Lite

Clockinator Lite has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Clockinator Lite has a vendor fix available, so running the current release closes it.

All of these findings were reported by Kévin Mosbahi (Mika). Clockinator Lite is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.10.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Clockinator Lite vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2025-31777

Clockinator Lite <= 1.0.9 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Clockinator Lite banner
Latestv1.1.0

Clockinator Lite

BeastThemes

Author

BeastThemes

5.0(2)
100/100
Last Updated
2026-10-11 (17d ago)
Active Installs
90+
Downloads
8,387
Requires WP
5.0+
Requires PHP
7.0+
Tested up to
WP 6.9.10
Created
2021-03-03 (6y ago)

Clockinator Lite helps small teams manage employee attendance and everyday workforce records directly in WordPress. It includes employee and department management, clock in/out, shifts, holidays, leave requests, attendance history, reports, and employee-facing self-service views. Use the Lite version for essential attendance workflows. When your team needs broader workforce operations, Clockinator Pro adds expanded payroll, productivity, project and task workflows, advanced reporting, and optional integrations and automation modules. Core Lite Features Employee management and employee self-service workflows Clock in/out and attendance history Attendance statuses and basic attendance analytics Attendance calendar with daily details Department and shift management Holiday management Leave requests and leave status tracking Attendance reports with filters Attendance remarks and notes Employee profile and dashboard shortcodes Elementor integration for supported employee components Responsive frontend and administration interfaces Translation-ready interface Clockinator Pro — Expanded Workforce Management Clockinator Pro builds on the essential attendance workflow with additional tools for managing people, schedules, productivity, and payroll-related operations from WordPress. Pro Plugin | Demo Pro Core Features Employee, department, location, and shift administration Attendance management, working-hours calculations, and location-aware clock in/out Holiday, event, notice, and leave management Payroll calculations and payroll management Payslip generation, including periodic generation Employee reimbursements and payslip-related reimbursement handling Project and task management for assigned employees Reports for attendance and workforce activity, with export options Employee dashboard and administrative dashboard Email and SMS notification alerts and editable notification templates Role-based access and IP restriction options Multi-timezone location management Import/export tools for supported employee and report data Optional Clockinator Pro Addons The following optional modules extend Clockinator Pro. Availability, compatibility, and licensing may vary by addon; see the product page for current details. Advanced Reports & Analytics — deeper attendance, leave, payroll, and productivity reporting with charts, filters, and exports. Smart Time Tracking — live session controls, manual time entries, and project/task-linked tracking workflows. AI Copilot — AI-assisted workforce insights and an assistant experience with supported AI providers. Process Automation & Approvals — configurable approval routing, notifications, logs, and escalation workflows. Frontend Dashboard — a dedicated employee-facing workspace for attendance, leave, profile, and self-service. Frontend Builder — tools for building branded frontend attendance pages, sections, and role-based widgets. Invoicing & Client Billing — invoice creation, payment tracking, billing details, recurring schedules, and statements. Kiosk / QR Attendance — QR attendance cards, kiosk clock-in/out, and supported door-access/API workflows. Biometric Attendance — device registration, employee enrollment links, and supported hardware/webhook integrations. Integrations — connect supported external services using webhooks, Slack, Google Calendar, Zapier, Make, accounting integrations, and REST API tools. Field Workforce — location-aware attendance, employee location views, routes, and visit workflows. Learn more about Clockinator Pro and its addons: Click here Short Description Employee attendance and time tracking for WordPress with clock in/out, shifts, leave requests, attendance reports, and employee self-service dashboards. Shortcodes The plugin provides employee-facing shortcodes for supported portal components, including the employee dashboard, clock interface, employee profile, and attendance calendar. [btcl-dashboard] [btcl-clock] [btcl-employee-profile] [btcl-attendance-calendar] License Clockinator Lite WordPress plugin, Copyright (C) 2021 Beastthemes. Licensed under the GPLv2 or later.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C