CVE-2023-0761 (published 2023-05-15T12:15:43.882Z)
The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting Staff members, which could allow attackers to make logged in admins delete arbitrary Staff via a CSRF attack
Affected products: Vendor: Unknown
Product: Clock In Portal- Staff & Attendance Management
Versions: 0