Clock In Portal- Staff & Attendance Management, CVE-2023-0763

CVE, Research URL: CVE-2023-0763
Home page URL: Security reports for Clock In Portal- Staff & Attendance Management
Application: Clock In Portal- Staff & Attendance Management
Published on: May 15, 2023
Research Description: The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting Holidays, which could allow attackers to make logged in admins delete arbitrary holidays via a CSRF attack
Affected versions: Min -, max 2.2.
Status: vulnerable

Clock In Portal- Staff &amp; Attendance Management, CVE-2023-0763