Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

ShiftController Employee Shift Scheduling — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in ShiftController Employee Shift Scheduling, with AI-generated Chinese analysis, references, and POCs.

Vendor: plainware

CVE IDTitleCVSSSeverityPaused
CVE-2024-44040 WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerability CWE-79 5.9 Medium2024-10-06
CVE-2024-9435 ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scripting CWE-79 6.1 Medium2024-10-04
CVE-2024-4733 ShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injection CWE-502 7.5 High2024-05-16
CVE-2023-29425 WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 5.4 Medium2023-11-12
CVE-2023-29424 WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2023-06-26
CVE-2023-1978 ShiftController Employee Shift Scheduling <= 4.9.25 - Reflected Cross-Site Scripting via Query String CWE-79 6.1 Medium2023-06-09

All 6 known CVE vulnerabilities affecting ShiftController Employee Shift Scheduling with full Chinese analysis, references, and POCs where available.