Flowdee Clickwhale vulnerabilities

• clickwhale WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability CVE-2025-47612 5.4 MediumMay 7, 2025
• clickwhale WordPress ClickWhale plugin <= 2.4.3 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-26963 5.4 MediumFebruary 25, 2025
• clickwhale – link manager, link shortener and click tracker for affiliate links & link pages, flowdee clickwhale +1 more ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-0804 6.4 MediumJanuary 29, 2025
• clickwhale – link manager, link shortener and click tracker for affiliate links & link pages, flowdee clickwhale +1 more ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages <= 2.4.1 - Reflected Cross-Site Scripting CVE-2024-11327 6.1 MediumJanuary 11, 2025
• clickwhale WordPress ClickWhale plugin <= 2.4.1 - SQL Injection vulnerability CVE-2024-51715 8.5 HighJanuary 7, 2025