Clinked Client Portal

Clinked Client Portal has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; 1 is fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

1 of the records (50%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each. Clinked Client Portal is installed on roughly 70 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage50%
Open

1

Fixed

1

Get automatic notifications for all Clinked Client Portal vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-32615

Clinked Client Portal <= 1.10 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Plugin Profile
Latestv1.10

Clinked Client Portal

Clinked

Author

Clinked

4.5(8)
90/100
Last Updated
2025-01-27 (2y ago)
Active Installs
70+
Downloads
14,138
Requires WP
3.0+
Requires PHP
0+
Tested up to
WP 6.7.7
Created
2015-03-02 (12y ago)

Clinked – The white-label client portal for business. Clinked is simple and secure client communication and collaboration tool which integrates with your website using a simple widget. You can manage, share and discuss content for your projects & teams, while keeping track on activities and timelines. Clinked makes client and team collaboration easy no matter how small or big your organisation is. You can start collaborating, sharing files, organizing tasks & events within minutes. See our pricing at https://clinked.com/pricing/ BENEFITS: Share files in your own branded client portal Easy to use – set-up in minutes White-label platform – including customized URL, web and mobile app Everything in one place – Files, Notes, Chat, Tasks, Events Secure bank-grade security No set up costs, only pay per user after 3 users SHARE FILES: Store files in folder structures, including Google files View files and videos instantaneously without downloading the files first Files & folders can easily be moved and copied to other folders and sub-folders Keep track of latest file updates and related comments via the Activity Streams Get notifications when specific content & activities are updated via the Following functionality File version control enables you to access and restore previous versions of documents MANAGE PROJECTS: Activity dashboard on individual project/group and account levels Task management – including assigning, status and approvals Universal search, finding keywords inside any files Integrate comments & discussions with shared content Notifications via email, push notifications & RSS COLLABORATE: Real-time Group Chat Notes (Wiki — online editor) Task Management & Progress Events & Team Calendar & iCal integration Discussions forums Version History Reply by email Threaded comments / Feedback @mention messaging Tag Cloud SECURE ENVIRONMENT: 256 bit SSL in transit & AES encryption at rest FISMA and FIPs certified

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C