Clockinator Lite vulnerabilities
We track 1 vulnerability in Clockinator Lite products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 12, 2026.
1vulnerabilities
1critical
0high
0exploited
10.0average CVSS score
Latest Clockinator Lite vulnerabilities
- 10.0 Critical severity
Clockinator Lite: Improper Neutralization of Special Elements used in an SQL Command
The Clockinator Lite WordPress plugin before 1.1.0 does not restrict access to several of its record deletion actions, and uses a user-supplied table name in a SQL query without validating or escaping it, allowing unauthenticated users to perform SQL injection