Lucene search
K

10 matches found

CNNVD
CNNVD
added 2026/05/29 12:0 a.m.6 views

WordPress plugin Link Whisper Free 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

7.2CVSS5.9AI score0.00233EPSS
Exploits1References3
EUVD
EUVD
added 2026/04/07 9:31 a.m.0 views

EUVD-2026-19576

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...

6.5CVSS5.9AI score0.00186EPSS
Exploits1References2
NVD
NVD
added 2026/04/07 7:16 a.m.2 views

CVE-2026-1900

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...

6.5CVSS0.00186EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/04/07 6:0 a.m.23 views

CVE-2026-1900 Link Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta Update

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...

0.00186EPSS
Exploits1References1
CVE
CVE
added 2026/04/07 6:0 a.m.8 views

CVE-2026-1900

The CVE concerns the Link Whisper Free WordPress plugin for WordPress sites, affected version

6.5CVSS5.9AI score0.00186EPSS
Exploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/07 6:0 a.m.2 views

CVE-2026-1900

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates...

5.9AI score0.00186EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/04/07 12:0 a.m.1 views

PT-2026-30797

Name of the Vulnerable Software and Affected Versions Link Whisper Free WordPress plugin versions prior to 0.9.1 Description The Link Whisper Free WordPress plugin has a publicly accessible REST endpoint that allows unauthenticated users to update settings. Recommendations Update to version 0.9.1...

6.5CVSS5.7AI score0.00186EPSS
Exploits1References5
CVE
CVE
added 2026/01/08 9:17 a.m.17 views

CVE-2025-67927

CVE-2025-67927 involves Link Whisper Free (WordPress plugin) and is a Reflected XSS due to improper input neutralization during web page generation. Affected versions are Free: up to 0.8.8 (per initial record); Wordfence notes the issue exists and has been patched. Impact could include sneakily i...

7.1CVSS6AI score0.0018EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/12/06 12:0 a.m.2 views

WordPress plugin Link Whisper Free 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS5.9AI score0.00172EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-27639

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00813EPSS
Exploits0References2
Rows per page
Query Builder