TI-2026-41270 CVE-2026-57333 · GHSA-33cv-ffrg-w682
WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions.
Spencer Haws
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Spencer Haws records in CISA KEVNo Spencer Haws vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2026-17939 CVE-2026-22357 · GHSA-xfxx-38qx-mrf4
WordPress Link Whisper Free plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spencer Haws Link Whisper Free link-whisper allows Reflected XSS.This issue affects Link Whisper Free: from n/a throug…
TI-2025-41536 CVE-2025-67927 · GHSA-4hhh-jc35-rrwh
WordPress Link Whisper Free plugin <= 0.8.8 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spencer Haws Link Whisper Free link-whisper allows Reflected XSS.This issue affects Link Whisper Free: from n/a throug…
TI-2025-16210 CVE-2025-22306 · GHSA-rh59-vgh2-8m84
WordPress Link Whisper Free plugin <= 0.7.7 - Sensitive Data Exposure vulnerability
Priority LOW 30
Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Spencer Haws Link Whisper Free link-whisper.This issue affects Link Whisper Free: from n/a through <= 0.7.7.
TI-2025-39118 CVE-2025-62970 · GHSA-p98w-mx82-xhg4
WordPress Link Whisper Free plugin <= 0.9.2 - Broken Access Control vulnerability
Priority LOW 29
Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through <= 0.9.2.