What’s Vulnerable › Products

ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages version is affected

Latest ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages vulnerabilities

• CVE-2025-10002 — ClickWhale <= 2.5.0 - Authenticated (Admin+) SQL injection (CVSS 4.9)
• CVE-2025-47612 — WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability (CVSS 8.8)
• CVE-2025-26963 — WordPress ClickWhale plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 8.8)
• CVE-2025-0804 — ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-11327 — ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting (CVSS 6.1)
• CVE-2024-51715 — WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability (CVSS 8.5)