Clerk
Clerk has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 5.6, and the most serious one scores 5.6 out of 10.
The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (100%).
The one issue recorded for Clerk has a vendor fix available, so running the current release closes it.
All of these findings were reported by Francesco Carlucci. Clerk is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
CVE-2022-3907Clerk <= 3.8.2 - Authorization Bypass via Insufficient Validation
Read the full analysisVulnerability Records
Clerk
Author
clerkio
Clerk.io is a software that helps your customers buy more from your webshop, through 4 amazing feature: Dynamic Product Recommendations, which are based directly on your customers behaviour An Intelligent Search Engine, which ranks products based on what most customers will be likely to buy Automated Email Recommendations, which always shows the right products to each individual customer Customer Segmentation, which lets you find the best possible Audience for any type of marketing. Clerk.io’s algorithms use your orders to continually updates each feature, so the right products will always be shown to each unique customer, based on their behaviour. When Clerk.io has been setup, it runs 100% automatically, so you can spend your time on other important parts of your business. With this plugin, you can easily get started with Clerk.io in a matter of minutes. You can get a 7 day free trial of Clerk.io, by going here: https://my.clerk.io/#/signup Once signed up, simply login to your my.clerk.io backend, which will guide you through the entire WooCommerce setup.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C