Vulnerabilities > Plainware > Shiftcontroller
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-10-04 | CVE-2024-9435 | Cross-site Scripting vulnerability in Plainware Shiftcontroller The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL keys in all versions up to, and including, 4.9.66 due to insufficient input sanitization and output escaping. | 6.1 |
| 2023-11-12 | CVE-2023-29425 | Unspecified vulnerability in Plainware Shiftcontroller Cross-Site Request Forgery (CSRF) vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin <= 4.9.23 versions. | 8.8 |
| 2023-06-26 | CVE-2023-29424 | Unspecified vulnerability in Plainware Shiftcontroller Auth. | 4.8 |
| 2023-06-09 | CVE-2023-1978 | Unspecified vulnerability in Plainware Shiftcontroller The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the query string in versions up to, and including, 4.9.25 due to insufficient input sanitization and output escaping. | 6.1 |