ClickWhale
clickwhale · plugin
Known security vulnerabilities for ClickWhale. Find out in seconds which version runs on your site with WP Lens.
6 known vulnerabilities
latest Sep 20, 2025
Vulnerabilities
- High 8.8
WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability
- High 8.8
WordPress ClickWhale plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability
- High 8.5
WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability
- Medium 6.1
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting
- Medium 5.4
ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- Medium 4.9
ClickWhale <= 2.5.0 - Authenticated (Admin+) SQL injection