Input validation vulnerability in Clock In Portal- Staff & Attendance Management 2.1

The Clock In Portal plugin for WordPress is vulnerable to a type of attack called Cross-Site Request Forgery in versions up to, and including, 2.1. This vulnerability happens because of missing or incorrect security measures on the delete action in the designations.php file. This means that unauthenticated attackers can delete designations if they can get a site administrator to do something like click on a link.