CVE-2025-10002: Improper Neutralization of Special Elements used in an SQL Command

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the exportcsv function in all versions up to, and including, 2.5.0 due to insufficient escaping on the user supplied parameter and lack of...

CVE-2024-51715

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through = 2.4.1...

CVE-2025-0804: Improper Neutralization of Input During Web Page Generation

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via link titles in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it...

PT-2025-4061 · WordPress · The Clickwhale – Link Manager

Name of the Vulnerable Software and Affected Versions: The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress versions up to, and including, 2.4.1 Description: The issue is related to Stored Cross-Site Scripting via link titles due to...

PT-2025-1637 · WordPress · The Clickwhale – Link Manager

Name of the Vulnerable Software and Affected Versions: ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress versions up to, and including, 2.4.1 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add...

CVE-2024-11327: Improper Neutralization of Input During Web Page Generation

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.1...