WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin ClickWhale versions = 2.4.6...

CVE-2025-47612 WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through = 2.4.6...

CVE-2025-47612

CVE-2025-47612 (ClickWhale) is a Missing Authorization vulnerability in the flowdee ClickWhale WordPress plugin (affected: 2.4.6 and earlier). The issue arises from incorrectly configured access control, enabling unauthorized access due to insufficient authorization checks. NVD/vectors indicate a...

CVE-2025-47612 WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability

Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through = 2.4.6...

PT-2025-20181 · Flowdee · Flowdee Clickwhale

Name of the Vulnerable Software and Affected Versions: flowdee ClickWhale versions 2.4.6 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For flowdee ClickWhale...

WordPress plugin ClickWhale 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2025-47612: Missing Authorization

Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through = 2.4.6...

CVE-2025-26963

Cross-Site Request Forgery CSRF vulnerability in ClickWhale ClickWhale clickwhale allows Cross Site Request Forgery.This issue affects ClickWhale: from n/a through = 2.4.3...

CVE-2025-26963

Cross-Site Request Forgery CSRF vulnerability in flowdee ClickWhale allows Cross Site Request Forgery. This issue affects ClickWhale: from n/a through 2.4.3...

CVE-2025-26963

Cross-Site Request Forgery CSRF vulnerability in ClickWhale ClickWhale clickwhale allows Cross Site Request Forgery.This issue affects ClickWhale: from n/a through = 2.4.3...

CVE-2025-26963 WordPress ClickWhale plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in ClickWhale ClickWhale clickwhale allows Cross Site Request Forgery.This issue affects ClickWhale: from n/a through = 2.4.3...

CVE-2025-26963

CVE-2025-26963 is a CSRF vulnerability in the WordPress ClickWhale plugin (versions up to and including 2.4.3) that affects the plugin’s settings changes. The CVE entries and Red Hat/NVD/ CVE lists confirm it’s a CSRF to settings change issue affecting ClickWhale and indicate a published fix (Pat...

CVE-2025-26963 WordPress ClickWhale plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross-Site Request Forgery CSRF vulnerability in ClickWhale ClickWhale clickwhale allows Cross Site Request Forgery.This issue affects ClickWhale: from n/a through = 2.4.3...

WordPress plugin ClickWhale 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

CVE-2025-26963: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ClickWhale ClickWhale clickwhale allows Cross Site Request Forgery.This issue affects ClickWhale: from n/a through = 2.4.3...

WordPress ClickWhale plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin ClickWhale versions = 2.4.3...

CVE-2024-51715

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

WordPress ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin ClickWhale versions = 2.4.1...

CVE-2025-0804

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via link titles in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it...

CVE-2025-0804

CVE-2025-0804 affects the WordPress plugin “ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages” (versions up to 2.4.1). The vulnerability is a Stored Cross-Site Scripting (XSS) via link titles caused by insufficient input sanitization and output escaping....