Medium · 5.4 CVE-2023-29425 EUVD-2023-32994GHSA-3xxj-rfjr-w6h5

WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Request Forgery (CSRF)

Published Nov 12, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin <= 4.9.23 versions.

Vendor	Product	Affected	Fixed
plainware.com	ShiftController Employee Shift Scheduling	≤ 4.9.23	—