ClickandPledge

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ClickandPledge records in CISA KEV

No ClickandPledge vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-20926 CVE-2025-28983 · GHSA-3rxm-qjgx-2m73

WordPress Click & Pledge Connect plugin <= 25.04010101-WP6.8 - Privilege Escalation via SQL Injection vulnerability

MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect allows Privilege Escalation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00356 Published 2025-07-04 No fix listed CWE-89

TI-2025-31503 CVE-2025-49455 · GHSA-v5f4-pm7v-cv3f

WordPress WordPress-WPJobBoard <= 25.07010000-WP6.8.1-JB5.11.5 - SQL Injection Vulnerability

MEDIUM 48

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge WordPress-WPJobBoard click-pledge-wpjobboard allows Blind SQL Injection.This issue affects WordPress-WP…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00443 Published 2025-06-10 No fix listed CWE-89

TI-2025-23615 CVE-2025-32550 · GHSA-px4w-362r-5vgp

WordPress Click & Pledge Connect Plugin Plugin <= 2.24080000-WP6.6.1 - SQL Injection vulnerability

LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickandPledge Click & Pledge Connect Plugin allows SQL Injection.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00533 Published 2025-04-09 No fix listed CWE-89

Open these records in search →

Critical	2
High	1
Medium	0
Low	0
No CVSS	0