https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-47612.htmlhttps://patchthecve.com/cve/CVE-2025-47612.htmlWed, 17 Jun 2026 09:28:24 +0000MEDIUM 5.4: Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through <= 2.4.6.https://patchthecve.com/cve/CVE-2025-26963.htmlhttps://patchthecve.com/cve/CVE-2025-26963.htmlWed, 17 Jun 2026 09:02:40 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in ClickWhale ClickWhale clickwhale allows Cross Site Request Forgery.This issue affects ClickWhale: from n/a through <= 2.4.3.https://patchthecve.com/cve/CVE-2025-0804.htmlhttps://patchthecve.com/cve/CVE-2025-0804.htmlWed, 17 Jun 2026 08:27:10 +0000MEDIUM 6.4: The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via link titles in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it poshttps://patchthecve.com/cve/CVE-2024-11327.htmlhttps://patchthecve.com/cve/CVE-2024-11327.htmlWed, 17 Jun 2026 06:57:32 +0000MEDIUM 6.1: The ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.4.1https://patchthecve.com/cve/CVE-2024-51715.htmlhttps://patchthecve.com/cve/CVE-2024-51715.htmlWed, 17 Jun 2026 08:06:11 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ClickWhale ClickWhale clickwhale allows Blind SQL Injection.This issue affects ClickWhale: from n/a through <= 2.4.1.