Link Whisper

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Link Whisper records in CISA KEV

No Link Whisper vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Link Whisper · all components

TI-2026-01566 CVE-2026-1900 · GHSA-9w5f-xhp2-5782

HIGH 68

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00193 Published 2026-04-07 Fixed in 0.9.1 CWE-306