Lucene search
K

13 matches found

Patchstack
Patchstack
added 2025/12/31 12:0 a.m.6 views

WordPress ClickWhale - Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin <= 2.4.1 - Reflected Cross-Site Scripting vulnerability

WordPress ClickWhale - Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin = 2.4.1 - Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin ClickWhale versions = 2.4.1...

6.1CVSS5.3AI score0.02577EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/23 3:14 p.m.2 views

CVE-2025-49954

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mithra62 WP-Click-Tracker wp-click-track allows Reflected XSS.This issue affects WP-Click-Tracker: from n/a through = 0.7.3...

7.1CVSS6.4AI score0.0003EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.2 views

EUVD-2025-35507

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mithra62 WP-Click-Tracker wp-click-track allows Reflected XSS.This issue affects WP-Click-Tracker: from n/a through = 0.7.3...

5.9AI score0.0003EPSS
Exploits0References2
NVD
NVD
added 2025/10/22 3:15 p.m.2 views

CVE-2025-49954

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mithra62 WP-Click-Tracker wp-click-track allows Reflected XSS.This issue affects WP-Click-Tracker: from n/a through = 0.7.3...

7.1CVSS0.0003EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/22 2:32 p.m.5 views

CVE-2025-49954 WordPress WP-Click-Tracker Plugin <= 0.7.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mithra62 WP-Click-Tracker wp-click-track allows Reflected XSS.This issue affects WP-Click-Tracker: from n/a through = 0.7.3...

7.1CVSS0.0003EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 2:32 p.m.2 views

CVE-2025-49954 WordPress WP-Click-Tracker Plugin <= 0.7.3 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mithra62 WP-Click-Tracker wp-click-track allows Reflected XSS.This issue affects WP-Click-Tracker: from n/a through = 0.7.3...

7.1CVSS6AI score0.0003EPSS
Exploits0References1
CVE
CVE
added 2025/10/22 2:32 p.m.4 views

CVE-2025-49954

CVE-2025-49954 concerns the WordPress WP-Click-Tracker plugin (versions up to 0.7.3). The issue is a Reflected XSS caused by improper neutralization of input during web page generation. Affected component is the plugin’s web page creation logic; impact is potential execution of script in a user’s...

7.1CVSS6AI score0.0003EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.2 views

WordPress plugin WP-Click-Tracker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... A cross-site...

7.1CVSS6AI score0.0003EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.2 views

PT-2025-43215

Name of the Vulnerable Software and Affected Versions mithra62 WP-Click-Tracker versions through 0.7.3 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, leading to a potential Reflected Cross-site Scripting issue. This could allow an...

7.1CVSS6.2AI score0.0003EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/07/14 11:56 a.m.2 views

WordPress WP-Click-Tracker Plugin <= 0.7.3 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WP-Click-Tracker versions = 0.7.3...

7.1CVSS6.2AI score0.0003EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/01/07 11:15 a.m.0 views

CVE-2024-51715

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages allows Blind SQL Injection.This issue affects ClickWhale – Link Manager, Link Shortener and...

8.5CVSS7.3AI score
Exploits0References1
NVD
NVD
added 2025/01/07 11:15 a.m.3 views

CVE-2024-51715

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

8.5CVSS0.00588EPSS
Exploits0References1
CVE
CVE
added 2025/01/07 10:49 a.m.42 views

CVE-2024-51715

CVE-2024-51715 is a SQL injection vulnerability in ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages (ClickWhale plugin for WordPress). Connected sources confirm an authenticated (Contributor+) SQL Injection impact, affecting versions up to 2.4.1 (no n/a...

8.5CVSS7.3AI score0.00588EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder