Input validation vulnerability in ClickWhale – Link Manager, Link Shortener and Click Tracker for Affiliate Links & Link Pages 2.4.1

The ClickWhale plugin used for managing, shortening, and tracking affiliate links and pages in WordPress has a security flaw that allows attackers to inject SQL code into the plugin. This can be done by users with Contributor-level access or higher, and can result in the exposure of sensitive information from the website’s database. This vulnerability exists in all versions of the plugin up to and including 2.4.1.

Detected in:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.