Lucene search
K

55 matches found

Patchstack
Patchstack
added 2025/12/31 12:0 a.m.6 views

WordPress ClickWhale - Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin <= 2.4.1 - Reflected Cross-Site Scripting vulnerability

WordPress ClickWhale - Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin = 2.4.1 - Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin ClickWhale versions = 2.4.1...

6.1CVSS5.3AI score0.02577EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-30310

Malicious code in bioql PyPI...

4.9CVSS6.4AI score0.00031EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-45792

Malicious code in bioql PyPI...

8.5CVSS8.7AI score0.00588EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-5412

Malicious code in bioql PyPI...

8.8CVSS8.7AI score0.00097EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-1877

Malicious code in bioql PyPI...

6.4CVSS9.2AI score0.00082EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-34224

Malicious code in bioql PyPI...

6.1CVSS8.7AI score0.02577EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-13768

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00254EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/22 4:32 a.m.2 views

CVE-2025-10002

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the exportcsv function in all versions up to, and including, 2.5.0 due to insufficient escaping on the user supplied parameter and lack of...

4.9CVSS6.5AI score0.00031EPSS
Exploits0References1
NVD
NVD
added 2025/09/20 5:15 a.m.2 views

CVE-2025-10002

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the exportcsv function in all versions up to, and including, 2.5.0 due to insufficient escaping on the user supplied parameter and lack of...

4.9CVSS0.00031EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/20 4:27 a.m.1 views

CVE-2025-10002 ClickWhale <= 2.5.0 - Authenticated (Admin+) SQL injection

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the exportcsv function in all versions up to, and including, 2.5.0 due to insufficient escaping on the user supplied parameter and lack of...

4.9CVSS6.2AI score0.00031EPSS
Exploits0References2
CVE
CVE
added 2025/09/20 4:27 a.m.13 views

CVE-2025-10002

CVE-2025-10002 affects the ClickWhale – Link Manager, Link Shortener and Click Tracker for WordPress plugin. Versions up to and including 2.5.0 are vulnerable to SQL Injection in export_csv() due to insufficient escaping and lack of proper query preparation, enabling authenticated Administrators ...

4.9CVSS6.1AI score0.00031EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/09/20 4:27 a.m.4 views

CVE-2025-10002 ClickWhale <= 2.5.0 - Authenticated (Admin+) SQL injection

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the exportcsv function in all versions up to, and including, 2.5.0 due to insufficient escaping on the user supplied parameter and lack of...

4.9CVSS0.00031EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/09/20 12:8 a.m.4 views

WordPress ClickWhale plugin <= 2.5.0 - Authenticated (Admin+) SQL injection vulnerability

Authenticated Admin+ SQL injection vulnerability discovered by Naoya Takahashi nakko in WordPress Plugin ClickWhale versions = 2.5.0...

4.9CVSS7.9AI score0.00031EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/09/20 12:0 a.m.2 views

WordPress plugin ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages SQL注入漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... WordPress plugi...

4.9CVSS7.6AI score0.00031EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 11:57 a.m.7 views

CVE-2025-0804

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via link titles in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS5.3AI score0.00082EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:51 a.m.4 views

CVE-2024-11327

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.1...

6.1CVSS6.4AI score0.02577EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/09 3:26 p.m.5 views

CVE-2025-47612

Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through = 2.4.6...

8.8CVSS7.2AI score0.00254EPSS
Exploits0References1
OSV
OSV
added 2025/05/07 3:16 p.m.0 views

CVE-2025-47612

Missing Authorization vulnerability in flowdee ClickWhale allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ClickWhale: from n/a through 2.4.6...

8.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2025/05/07 3:16 p.m.6 views

CVE-2025-47612

Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through = 2.4.6...

8.8CVSS0.00254EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/05/07 3:3 p.m.3 views

WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin ClickWhale versions = 2.4.6...

8.8CVSS8.2AI score0.00254EPSS
Exploits0Affected Software1
Rows per page
Query Builder