Voidek Employee Portal
Voidek Employee Portal has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Voidek Employee Portal has a vendor fix available, so running the current release closes it.
All of these findings were reported by Athiwat Tiprasaharn (Jitlada). The current release is tested up to WordPress 6.9.7.
CVE-2025-12093Voidek Employee Portal <= 1.0.7 - Missing Authorization
Read the full analysisVulnerability Records

Voidek Employee Portal
Author
Voidek Webolutions
Voidek Employee Portal is a powerful and customizable plugin designed to give employees a full-featured interface in the frontend of your WordPress site. Ideal for internal portals or company intranets, this plugin supports task tracking, EOD (End of Day) reports, and leave applications — all from a user-friendly frontend interface. Features include: Frontend Dashboard for employees Role-based access: Admins see backend, users see frontend Task assignment and tracking EOD reporting with filters and summaries Leave applications and approval tracking Fully AJAX-powered, responsive interface Secure role-based redirection and access Roles and Permissions Admin – Full access to backend – Can create Manager and Employee users – Can manage all projects, tasks, EODs, and leaves – Does not use the frontend dashboard Manager – Accesses the frontend dashboard – Can add Employee users from the frontend – Can create, edit, and assign projects – Can assign and track tasks – Can view and approve team EOD reports – Can view calendar events, team leave data, anniversaries, and birthdays – Cannot access the backend admin area Employee – Accesses the frontend dashboard – Can manage their own tasks – Can submit daily EOD reports – Can apply for and view leave requests – Can view assigned projects, tasks, and leaves – Cannot add other users – Cannot create new projects Common to All Roles (Admin, Manager, Employee) – Can create and work on Tasks – Can submit EODs (End of Day reports) for each task – Can view Task Summary – Can view EOD List and EOD Summary – Can apply for and view Leave Requests Source Code This plugin bundles the following third-party libraries (all MIT licensed): Bootstrap 5 (CSS/JS) DataTables & Buttons Extension SweetAlert2 Date Range Picker jQuery UI + Timepicker Addon Font Awesome JSZip All files are included unmodified in the /assets/ folder. Original sources and licenses are available on their respective official repositories/CDNs.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C