ShiftController Employee Shift Scheduling

ShiftController Employee Shift Scheduling has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 6 are fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 2 high. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (67%). Other recurring categories include Cross-Site Request Forgery (CSRF), Deserialization Of Untrusted Data.

Every one of the 6 issues recorded for ShiftController Employee Shift Scheduling has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, one record each. ShiftController Employee Shift Scheduling is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage100%
Open

0

Fixed

6

Get automatic notifications for all ShiftController Employee Shift Scheduling vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.5CVE-2024-4733

ShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injection

Read the full analysis

Vulnerability Records

6 records
Plugin Profile
Latestv4.9.97

ShiftController Employee Shift Scheduling

plainware

Author

plainware

4.4(22)
88/100
Last Updated
2026-09-04 (9d ago)
Active Installs
600+
Downloads
129,629
Requires WP
4.1+
Requires PHP
5.6+
Tested up to
WP 7.1
Created
2013-11-19 (13y ago)

ShiftController is a lightweight, easy to use WordPress staff scheduling and rostering, rota planning plugin for any business that needs to manage and schedule employees. Keep Organized Associate your employees with calendars, configure shift types, assign managers, and keep your staff scheduling under control anywhere at anytime online from your WordPress powered website! Escape Schedule Conflicts Quickly see and correct any conflicts due to overlapping shifts or timeoffs. Each conflicting entry is highlighted in the schedule calendar so you will not miss it. Mobile Friendly Responsive design that works perfectly well for iPhone, Android, Blackberry, Windows as well as for desktops, laptops and tablets. Pro Version Features Bulk Edit The Bulk Edit function lets you change or delete multiple shifts at once. Repeat Shifts Quickly create new or repeat existing shifts months ahead. Shift Pickup With the Shift Pickup module shifts can be marked as requested for pickup, and other employees can pick them up. Schedule Templates Quickly create new week schedules from schedule templates. Custom Fields Additional fields for shifts to keep custom information. Schedule Limits Limit total number or duration of shifts within a day, a week, or a month. Please visit our website for more info and get the Premium version now!. Support Please contact us at https://www.shiftcontroller.com/contact/ Author: Plainware Author URI: https://www.shiftcontroller.com

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C