Lucene search
+L

10 matches found

CNNVD
CNNVD
•added 2026/05/29 12:00 a.m.•25 views

WordPress plugin Link Whisper Free 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.2CVSS5.9AI score0.00242EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/04/07 9:31 a.m.•27 views

EUVD-2026-19576

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...

6.5CVSS5.9AI score0.00186EPSS
SaveExploits1References2
NVD
NVD
•added 2026/04/07 7:16 a.m.•17 views

CVE-2026-1900

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...

6.5CVSS0.00186EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/04/07 6:00 a.m.•40 views

CVE-2026-1900 Link Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta Update

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...

0.00186EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/07 6:00 a.m.•43 views

CVE-2026-1900

The Link Whisper Free WordPress plugin (versions prior to 0.9.1 ) contains a vulnerability where a publicly accessible REST endpoint allows unauthenticated users to perform settings updates . Additionally, the vulnerability can be used to update user meta . Impacted versions are susceptible to un...

6.5CVSS5.8AI score0.00186EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2026/04/07 6:00 a.m.•12 views

CVE-2026-1900

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...

5.9AI score0.00186EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/04/07 12:00 a.m.•26 views

PT-2026-30797

Name of the Vulnerable Software and Affected Versions Link Whisper Free WordPress plugin versions prior to 0.9.1 Description The Link Whisper Free WordPress plugin has a publicly accessible REST endpoint that allows unauthenticated users to update settings. Recommendations Update to version 0.9.1...

6.5CVSS5.7AI score0.00186EPSS
SaveExploits1References5
CVE
CVE
•added 2026/01/08 9:17 a.m.•52 views

CVE-2025-67927

CVE-2025-67927 involves Link Whisper Free (WordPress plugin) and is a Reflected XSS due to improper input neutralization during web page generation. Affected versions are Free: up to 0.8.8 (per initial record); Wordfence notes the issue exists and has been patched. Impact could include sneakily i...

7.1CVSS5.8AI score0.00219EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/06 12:00 a.m.•59 views

WordPress plugin Link Whisper Free 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS5.9AI score0.00205EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-27639

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00813EPSS
SaveExploits0References2
Rows per page
Query Builder