Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: ClickWhale Component: Clickwhale Clear all filters
TI-2025-30109 CVE-2025-47612 · GHSA-hphg-q3xv-rqhp

WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability

Priority LOW 38

Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through <= 2.4.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0038 Published 2025-05-07 No fix listed CWE-862
TI-2025-00677 CVE-2025-0804 · GHSA-vg86-8433-4hr2

Cross-site scripting in ClickWhale – Link Manager, Link Shortener and Click Tracker for…

Priority LOW 28

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via link titles in all versions up to, and including, 2.4…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00261 Published 2025-01-29 No fix listed CWE-79
TI-2024-10493 CVE-2024-11327 · GHSA-hrff-h5x9-vqrp

Cross-site scripting in ClickWhale – Link Manager, Link Shortener and Click Tracker for…

Priority LOW 27

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg wit…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00362 Published 2025-01-11 No fix listed CWE-79
TI-2024-34629 CVE-2024-51715 · GHSA-7p5r-7226-8pqg

WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through <= 2.4.1.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00395 Published 2025-01-07 No fix listed CWE-89