Read the docs

ClickWhale

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

ClickWhale records in CISA KEV

No ClickWhale vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Clickwhale 5 records LOW

Records

5 records in Clickwhale · all components

TI-2025-30109 CVE-2025-47612 · GHSA-hphg-q3xv-rqhp

WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability

Priority LOW 38

Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through <= 2.4.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0038 Published 2025-05-07 No fix listed CWE-862
TI-2024-34629 CVE-2024-51715 · GHSA-7p5r-7226-8pqg

WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through <= 2.4.1.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00395 Published 2025-01-07 No fix listed CWE-89
TI-2025-00677 CVE-2025-0804 · GHSA-vg86-8433-4hr2

Cross-site scripting in ClickWhale – Link Manager, Link Shortener and Click Tracker for…

Priority LOW 28

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via link titles in all versions up to, and including, 2.4…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00261 Published 2025-01-29 No fix listed CWE-79
TI-2024-10493 CVE-2024-11327 · GHSA-hrff-h5x9-vqrp

Cross-site scripting in ClickWhale – Link Manager, Link Shortener and Click Tracker for…

Priority LOW 27

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg wit…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00362 Published 2025-01-11 No fix listed CWE-79
Open these records in search →