Vulnerabilities

TI-2026-74745 CVE-2026-109686

PHP object injection in WordPress Link Whisper Free plugin

MEDIUM 49

Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00304 Published 2026-10-15 No fix listed CWE-502

TI-2026-74744 CVE-2026-109685

Reflected cross-site scripting in Link Whisper Free WordPress plugin

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Reflected XSS.This issue affects Link Whisper Free: from n/a th…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00142 Published 2026-10-15 No fix listed CWE-79

TI-2026-74746 CVE-2026-109688

SQL injection in Link Whisper Free WordPress plugin

MEDIUM 45

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00229 Published 2026-10-15 No fix listed CWE-89

TI-2026-71625 CVE-2026-109687 · GHSA-h5p4-78h6-888c

Blind SQL injection in Link Whisper Free WordPress plugin

LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00226 Published 2026-10-13 No fix listed CWE-89

TI-2026-41290 CVE-2026-57353 · GHSA-2565-6q46-9x5v

WordPress Link Whisper Premium plugin <= 2.9.0 - Broken Access Control vulnerability

LOW 29

Subscriber Broken Access Control in Link Whisper Premium <= 2.9.0 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00299 Published 2026-07-02 No fix listed CWE-862

TI-2026-01566 CVE-2026-1900 · GHSA-9w5f-xhp2-5782

Link Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta Update

HIGH 68

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00193 Published 2026-04-07 Fixed in 0.9.1 CWE-306

TI-2023-15788 CVE-2023-32506 · GHSA-vwj4-qq98-x49w

WordPress Link Whisper Free plugin <= 0.6.3 - Unauthenticated Broken Access Control vulnerability

LOW 35

Missing Authorization vulnerability in Link Whisper Link Whisper Free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through 0.6.3.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00473 Published 2024-12-13 No fix listed CWE-862

TI-2024-21037 CVE-2024-31934 · GHSA-6854-3fp5-fh9h

WordPress Link Whisper Free plugin <= 0.6.9 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Link Whisper Link Whisper Free.This issue affects Link Whisper Free: from n/a through 0.6.9.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00214 Published 2024-04-11 No fix listed CWE-352

TI-2024-18593 CVE-2024-27992 · GHSA-h7gg-c33j-63rm

WordPress Link Whisper Free plugin <= 0.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Whisper Link Whisper Free allows Reflected XSS.This issue affects Link Whisper Free: from n/a through 0.6.8.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00394 Published 2024-03-21 No fix listed CWE-79

TI-2023-25960 CVE-2023-47852 · GHSA-rqvh-hrwh-vv6f

WordPress Link Whisper Free Plugin <= 0.6.5 is vulnerable to SQL Injection

LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper Link Whisper Free.This issue affects Link Whisper Free: from n/a through 0.6.5.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00561 Published 2023-12-20 No fix listed CWE-89

Vulnerabilities

Filters