EUVD-2026-102053

Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7...

EUVD-2026-102052

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Reflected XSS.This issue affects Link Whisper Free: from n/a through 0.9.7...

EUVD-2026-102048

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from n/a through 0.9.7...

CVE-2026-109685

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Reflected XSS.This issue affects Link Whisper Free: from n/a through 0.9.7...

CVE-2026-109688

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from n/a through 0.9.7...

CVE-2026-109686

Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7...

CVE-2026-109686 WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7...

CVE-2026-109686

The Link Whisper Free plugin (versions through 0.9.7 ) for WordPress is vulnerable to a Deserialization of Untrusted Data vulnerability. This flaw allows for Object Injection , potentially leading to significant impacts on confidentiality, integrity, and availability. The vulnerability is identif...

CVE-2026-109685

The Link Whisper Free WordPress plugin (versions

CVE-2026-109685 WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Reflected XSS.This issue affects Link Whisper Free: from n/a through 0.9.7...

CVE-2026-109688 WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from n/a through 0.9.7...

CVE-2026-109688

The Link Whisper Free WordPress plugin (versions

WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tarcísio LuchesiPoystick in WordPress Plugin Link Whisper Free versions = 0.9.7...

WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin Link Whisper Free versions = 0.9.7...

WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by dzaku in WordPress Plugin Link Whisper Free versions = 0.9.7...

CVE-2026-109687

The Link Whisper Free WordPress plugin (versions ¢= 0.9.7 ) is vulnerable to Blind SQL Injection due to the Improper Neutralization of Special Elements used in an SQL Command . An attacker with high privileges may leverage this flaw to execute unauthorized database queries. No specific remediatio...

WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability

SQL Injection vulnerability discovered by mrhaji8 in WordPress Plugin Link Whisper Free versions = 0.9.7...

CVE-2025-11262-Lab

CVE-2025-11262 - Link Whisper Free Unauthenticated Stored Blind XSS Executive Summary This repository contains a local Docker lab for reproducing CVE-2025-11262 , an unauthenticated stored cross-site scripting issue affecting the WordPress plugin Link Whisper Free. The lab compares two plugin...

WordPress Link Whisper plugin < 0.9.7 - Editor+ SQL Injection via domain Parameter vulnerability

Editor+ SQL Injection via domain Parameter vulnerability discovered by huytqtq in WordPress Plugin Link Whisper Free versions 0.9.7...

CVE-2026-14601

The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks...