CVE-2023-0762: Infigosoftware Clock In Portal- Staff & Attendance Management

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Clock In Portal- Staff & Attendance Management WordPress plugin through 2.1 does not have CSRF check when deleting designations, which could allow attackers to make logged in admins delete arbitrary designations via a CSRF attack

Affected products

• Infigosoftware Clock In Portal- Staff & Attendance Management: up to and including 2.1

Published 2023-05-15. Last modified 2026-06-17.