Medium · 4.3 CVE-2025-46513 EUVD-2025-11997GHSA-jg69-5w5h-x3pf

WordPress All in One Time Clock Lite plugin < 1.3.326 - Cross Site Request Forgery (CSRF) Vulnerability

Published Apr 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Codebangers Product: All in One Time Clock Lite

Description

Cross-Site Request Forgery (CSRF) vulnerability in Codebangers All in One Time Clock Lite aio-time-clock-lite allows Cross Site Request Forgery.This issue affects All in One Time Clock Lite: from n/a through < 1.3.326.

Affected products

Vendor	Product	Affected	Fixed
Codebangers	All in One Time Clock Lite	≤ 1.3.326	—

References

https://patchstack.com/database/Wordpress/Plugin/aio-time-clock-lite/vulnerability/wordpress-all-in-one-time-clock-lite-1-3-324-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry