ClickWhale
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ClickWhale | 3 | – | May 7, 2025 |
| ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages | 3 | – | Sep 20, 2025 |
Exploited and recent CVEs
- CVE-2025-10002 ClickWhale <= 2.5.0 - Authenticated (Admin+) SQL injection 0.3%
- CVE-2025-47612 WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability 0.4%
- CVE-2025-26963 WordPress ClickWhale plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability 0.2%
- CVE-2025-0804 ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-11327 ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting 0.4%
- CVE-2024-51715 WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability 0.4%