Threats tagged 'ghsa-79rh-79mv-q6hj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-124817The Clockinator Lite WordPress plugin before 1.1.0 does not check authorisation or ownership when updating leave High2026-11-12GCVE DatabaseCVE-2026-124817 The Clockinator Lite WordPress plugin versions before 1.1.0 have a vulnerability where the plugin does not verify authorization or ownership when updating leave requests. This flaw allows unauthenticated users to modify any leave record, including approving, rejecting, or reassigning leave requests to other users. Report on CVE-2026-124817 Vulnerability #ghsa-79rh-79mv-q6hj	GCVE Database	2026-11-12

Page 1 of 1