10 matches found
WordPress plugin Link Whisper – Cross-site scripting vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
EUVD-2026-19576
The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...
CVE-2026-1900
The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...
CVE-2026-1900
The Link Whisper Free WordPress plugin (versions prior to 0.9.1 ) contains a vulnerability where a publicly accessible REST endpoint allows unauthenticated users to perform settings updates . Additionally, the vulnerability can be used to update user meta . Impacted versions are susceptible to un...
CVE-2026-1900
The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...
CVE-2026-1900 Link Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta Update
The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...
PT-2026-30797
Name of the Vulnerable Software and Affected Versions Link Whisper Free WordPress plugin versions prior to 0.9.1 Description The Link Whisper Free WordPress plugin has a publicly accessible REST endpoint that allows unauthenticated users to update settings. Recommendations Update to version 0.9.1...
CVE-2025-67927
CVE-2025-67927 involves Link Whisper Free (WordPress plugin) and is a Reflected XSS due to improper input neutralization during web page generation. Affected versions are Free: up to 0.8.8 (per initial record); Wordfence notes the issue exists and has been patched. Impact could include sneakily i...
WordPress plugin Link Whisper – Cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...