What’s Vulnerable › Products

plainware ShiftController Employee Shift Scheduling vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your plainware ShiftController Employee Shift Scheduling version is affected

Latest plainware ShiftController Employee Shift Scheduling vulnerabilities

• CVE-2024-44040 — WordPress ShiftController Employee Shift Scheduling plugin <= 4.9.64 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
• CVE-2024-9435 — ShiftController Employee Shift Scheduling <= 4.9.66 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2024-4733 — ShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injection (CVSS 7.5)
• CVE-2023-29425 — WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2023-29424 — WordPress ShiftController Employee Shift Scheduling Plugin <= 4.9.23 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
• CVE-2023-1978 — ShiftController Employee Shift Scheduling <= 4.9.25 - Reflected Cross-Site Scripting via Query String (CVSS 6.1)