Time Clock – A WordPress Employee & Volunteer Time Clock Plugin

Time Clock – A WordPress Employee & Volunteer Time Clock Plugin has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 3 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 8.3 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Code Injection.

Every one of the 3 issues recorded for Time Clock – A WordPress Employee & Volunteer Time Clock Plugin has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each. Time Clock – A WordPress Employee & Volunteer Time Clock Plugin is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Time Clock – A WordPress Employee & Volunteer Time Clock Plugin vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.3CVE-2024-9593

Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution

Read the full analysis

Vulnerability Records

3 records


2025-10-23 19:44	Time Clock – A WordPress Employee & Volunteer Time Clock Plugin <= 1.3.1 - Authenticated (Custom+) Stored Cross-Site Scripting Time Clock <= 1.3.1	`CVE-2025-10701`	6.4 Medium	Jonas Benjamin Friedli	Yes
2025-05-07 00:00	Time Clock <= 1.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Time Clock <= 1.2.3	`CVE-2025-47516`	4.4 Medium	Nabil Irawan	Yes
2024-10-18 00:00	Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Unauthenticated (Limited) Remote Code Execution Time Clock <= 1.2.2	`CVE-2024-9593`	8.3 High	István Márton	Yes

Showing 1–3 of 3 reports

Latestv1.3.2

Time Clock – A WordPress Employee & Volunteer Time Clock Plugin

Author

Scott Paterson

4.9(8)

98/100

Last Updated

2026-08-22 (22d ago)

Active Installs

500+

Downloads

19,259

Requires WP

4.0+

Requires PHP

5.6+

Tested up to

WP 7.1

Created

2018-04-17 (9y ago)

Overview This plugin allows employees or volunteers to clock in and out for their work shifts. From the Developer: I built this plugin because I’ve frequently volunteered at bicycle and computer repair non-profits, and each one was using a buggy, custom-made time clock to track hours. It caused the non-profit extra work and was a headache. So I built this plugin to help out other organizations in the same situation. If you have a non-profit or a business, this plugin will help you track hours. Having Problems? If you are having problems or see a bug, please create a support thread here. Watch this 2 minute video of how the plugin works: Time Clock Features Users can clock in and out from shifts Users can clock in and out from lunch breaks Admins can easily make new user accounts Admins can view the number of hours worked for each day Admins can change the color and text of the time clock Time Clock Pro We offer a Pro version of this plugin for business owners who need more features. Export Activity to CSV File Time Clock can be used as a widget Admin Metrics See how many users are currently working Link a WordPress account to a Time Clock Account so users don’t have to login You can learn more about Time Clock Pro here About the Plugin Developer This plugin was created by WP Plugin.

View on WordPress.org