142 matches found
CVE-2025-11262-Lab
CVE-2025-11262 - Link Whisper Free 未认证存储型盲 XSS 执行摘要 此仓库包含一个本地 Docker 实验环境，用于复现 CVE-2025-11262 ，这是一个影响 WordPress 插件 Link Whisper Free 的未认证存储型跨站脚本漏洞。 该实验环境对比两个插件版本： Service| Plugin version| Purpose| URL ---|---|---|--- vuln| 0.9.0| 易受攻击的目标| http://127.0.0.1:8081 patched| 0.9.1| 已修补的对比目标|...
WordPress Link Whisper plugin < 0.9.7 - Editor+ SQL Injection via domain Parameter vulnerability
Editor+ SQL Injection via domain Parameter vulnerability discovered by huytqtq in WordPress Plugin Link Whisper Free versions 0.9.7...
CVE-2026-14601
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
EUVD-2026-63816
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
CVE-2026-14601 Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
CVE-2026-14601 Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
CVE-2026-14601
The Link Whisper Free WordPress plugin (versions before 0.9.7 ) is vulnerable to SQL injection due to the improper sanitization and escaping of a parameter—specifically identified as the domain parameter —before it is used in a SQL query. This flaw allows authenticated users with the Editor role ...
PT-2026-79300
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
CVE-2026-14601: Improper Neutralization of Special Elements used in an SQL Command
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...
CVE-2026-57353
Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...
CVE-2026-57353 WordPress Link Whisper Premium plugin <= 2.9.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...
EUVD-2026-41352
Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...
CVE-2026-57353
The CVE concerns WordPress Link Whisper Premium plugin <= 2.9.0 with a Broken Access Control issue. The accompanying CVSS data (Patchstack, v3.1) indicates an external attack over network, with low privileges and no user interaction, potentially affecting integrity (I: High) while confidential...
CVE-2026-57353 WordPress Link Whisper Premium plugin <= 2.9.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...
CVE-2026-57353
Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...
PT-2026-54996
Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...
CVE-2026-57353: Missing Authorization
Subscriber Broken Access Control in Link Whisper Premium = 2.9.0 versions...
WordPress Link Whisper Premium plugin <= 2.9.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Austin Ginder in WordPress Plugin Link Whisper Premium versions = 2.9.0...