Voidek Employee Portal

Voidek Employee Portal has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Voidek Employee Portal has a vendor fix available, so running the current release closes it.

All of these findings were reported by Athiwat Tiprasaharn (Jitlada). The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Voidek Employee Portal vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2025-12093

Voidek Employee Portal <= 1.0.7 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Voidek Employee Portal banner
Latestv1.0.8

Voidek Employee Portal

Voidek Webolutions

Author

Voidek Webolutions

0.0(0)
0/100
Last Updated
2025-12-15 (9mo ago)
Active Installs
0+
Downloads
689
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 6.9.7
Created
2025-08-26 (1y ago)

Voidek Employee Portal is a powerful and customizable plugin designed to give employees a full-featured interface in the frontend of your WordPress site. Ideal for internal portals or company intranets, this plugin supports task tracking, EOD (End of Day) reports, and leave applications — all from a user-friendly frontend interface. Features include: Frontend Dashboard for employees Role-based access: Admins see backend, users see frontend Task assignment and tracking EOD reporting with filters and summaries Leave applications and approval tracking Fully AJAX-powered, responsive interface Secure role-based redirection and access Roles and Permissions Admin – Full access to backend – Can create Manager and Employee users – Can manage all projects, tasks, EODs, and leaves – Does not use the frontend dashboard Manager – Accesses the frontend dashboard – Can add Employee users from the frontend – Can create, edit, and assign projects – Can assign and track tasks – Can view and approve team EOD reports – Can view calendar events, team leave data, anniversaries, and birthdays – Cannot access the backend admin area Employee – Accesses the frontend dashboard – Can manage their own tasks – Can submit daily EOD reports – Can apply for and view leave requests – Can view assigned projects, tasks, and leaves – Cannot add other users – Cannot create new projects Common to All Roles (Admin, Manager, Employee) – Can create and work on Tasks – Can submit EODs (End of Day reports) for each task – Can view Task Summary – Can view EOD List and EOD Summary – Can apply for and view Leave Requests Source Code This plugin bundles the following third-party libraries (all MIT licensed): Bootstrap 5 (CSS/JS) DataTables & Buttons Extension SweetAlert2 Date Range Picker jQuery UI + Timepicker Addon Font Awesome JSZip All files are included unmodified in the /assets/ folder. Original sources and licenses are available on their respective official repositories/CDNs.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C