CVE-2025-47612: WordPress ClickWhale plugin <= 2.4.6 - Broken Access Control Vulnerability
Published May 7, 2025
·Updated
Missing Authorization vulnerability in ClickWhale ClickWhale clickwhale allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickWhale: from n/a through <= 2.4.6.
Affected Software
3 affected components
ClickWhale ClickWhale<=2.4.6
WordPress ClickWhale<=2.4.6
flowdee Clickwhale Wordpress<2.4.7
Event History
May 7, 2025
CVE Published
via MITRE·02:20 PM
Data Sourced
via MITRE·02:20 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-47612?
CVE-2025-47612 is categorized as a missing authorization vulnerability that can lead to unauthorized access.
2
How do I fix CVE-2025-47612?
To remediate CVE-2025-47612, ensure that access control security levels are properly configured in ClickWhale.
3
Which versions of ClickWhale are affected by CVE-2025-47612?
CVE-2025-47612 affects ClickWhale versions up to and including 2.4.6.
4
What potential impact does CVE-2025-47612 have?
This vulnerability can be exploited to gain unauthorized access to sensitive functionalities or data within ClickWhale.
5
Is CVE-2025-47612 related to WordPress?
Yes, CVE-2025-47612 also affects the WordPress version of ClickWhale.