Lucene search
K

17 matches found

Patchstack
Patchstack
added 2025/12/31 12:0 a.m.6 views

WordPress ClickWhale - Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin <= 2.4.1 - Reflected Cross-Site Scripting vulnerability

WordPress ClickWhale - Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin = 2.4.1 - Reflected Cross-Site Scripting vulnerability discovered by vgo0 in WordPress Plugin ClickWhale versions = 2.4.1...

6.1CVSS5.3AI score0.02577EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-1877

Malicious code in bioql PyPI...

6.4CVSS9.2AI score0.00082EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-34224

Malicious code in bioql PyPI...

6.1CVSS8.7AI score0.02577EPSS
Exploits0References3
NVD
NVD
added 2025/09/20 5:15 a.m.2 views

CVE-2025-10002

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the exportcsv function in all versions up to, and including, 2.5.0 due to insufficient escaping on the user supplied parameter and lack of...

4.9CVSS0.00031EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/20 4:27 a.m.1 views

CVE-2025-10002 ClickWhale <= 2.5.0 - Authenticated (Admin+) SQL injection

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to SQL Injection via the exportcsv function in all versions up to, and including, 2.5.0 due to insufficient escaping on the user supplied parameter and lack of...

4.9CVSS6.2AI score0.00031EPSS
Exploits0References2
CVE
CVE
added 2025/09/20 4:27 a.m.13 views

CVE-2025-10002

CVE-2025-10002 affects the ClickWhale – Link Manager, Link Shortener and Click Tracker for WordPress plugin. Versions up to and including 2.5.0 are vulnerable to SQL Injection in export_csv() due to insufficient escaping and lack of proper query preparation, enabling authenticated Administrators ...

4.9CVSS6.1AI score0.00031EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/09/20 12:0 a.m.2 views

WordPress plugin ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages SQL注入漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin.... WordPress plugi...

4.9CVSS7.6AI score0.00031EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 11:57 a.m.6 views

CVE-2025-0804

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via link titles in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS5.3AI score0.00082EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:51 a.m.4 views

CVE-2024-11327

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.1...

6.1CVSS6.4AI score0.02577EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/02/23 9:22 p.m.10 views

WordPress ClickWhale plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability

Cross Site Request Forgery CSRF to Settings Change vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin ClickWhale versions = 2.4.3...

8.8CVSS7AI score0.00097EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/01/29 4:15 a.m.10 views

CVE-2025-0804

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via link titles in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS0.00082EPSS
Exploits0References2
CVE
CVE
added 2025/01/29 3:21 a.m.61 views

CVE-2025-0804

CVE-2025-0804 affects the WordPress plugin “ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages” (versions up to 2.4.1). The vulnerability is a Stored Cross-Site Scripting (XSS) via link titles caused by insufficient input sanitization and output escaping....

6.4CVSS5.7AI score0.00082EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2025/01/11 3:15 a.m.0 views

CVE-2024-11327

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.1...

6.1CVSS7.4AI score
Exploits0References3
NVD
NVD
added 2025/01/11 3:15 a.m.6 views

CVE-2024-11327

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.1...

6.1CVSS0.02577EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/01/11 2:20 a.m.7 views

CVE-2024-11327 ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.1...

6.1CVSS6.4AI score0.02577EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/01/11 2:20 a.m.15 views

CVE-2024-11327 ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting

The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg & removequeryarg without appropriate escaping on the URL in all versions up to, and including, 2.4.1...

6.1CVSS0.02577EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/01/11 12:0 a.m.2 views

WordPress plugin ClickWhale 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS7.6AI score0.02577EPSS
Exploits0References3
Rows per page
Query Builder