Lucene search
+L

467 matches found

Vulnrichment
Vulnrichment
•added 2025/12/06 3:27 a.m.•6 views

CVE-2025-11263 Link Whisper Free <= 0.8.8 - Reflected Cross-Site Scripting

The Link Whisper Free plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the type parameter in all versions up to, and including, 0.8.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6.1AI score0.00205EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/06 3:27 a.m.•57 views

CVE-2025-11263 Link Whisper Free <= 0.8.8 - Reflected Cross-Site Scripting

The Link Whisper Free plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the type parameter in all versions up to, and including, 0.8.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS0.00205EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/06 12:00 a.m.•5 views

CVE-2025-11263: Improper Neutralization of Input During Web Page Generation

The Link Whisper Free plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the type parameter in all versions up to, and including, 0.8.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS6.1AI score0.00205EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/06 12:00 a.m.•60 views

WordPress plugin Link Whisper Free 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS5.9AI score0.00205EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/12/06 12:00 a.m.•20 views

PT-2025-49324

The Link Whisper Free plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the type parameter in all versions up to, and including, 0.8.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web...

6.1CVSS5.6AI score0.00205EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2025/11/08 2:29 p.m.•28 views

Microsoft Uncovers 'Whisper Leak' Attack That Identifies AI Chat Topics in Encrypted Traffic

Microsoft has disclosed details of a novel side-channel attack targeting remote language models that could enable a passive adversary with capabilities to observe network traffic to glean details about model conversation topics despite encryption protections under certain circumstances. This...

6.4AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/10/28 2:38 a.m.•19 views

CVE-2025-62970

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through = 0.9.2...

5.3CVSS6AI score0.00218EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/27 3:30 a.m.•21 views

EUVD-2025-35975

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through = 0.8.8...

5.3CVSS6.5AI score0.00218EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/27 2:15 a.m.•21 views

CVE-2025-62970

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through = 0.9.2...

5.3CVSS0.00218EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/27 1:34 a.m.•8 views

CVE-2025-62970 WordPress Link Whisper Free plugin <= 0.9.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through = 0.9.2...

5.3CVSS6AI score0.00218EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/27 1:34 a.m.•35 views

CVE-2025-62970 WordPress Link Whisper Free plugin <= 0.9.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through = 0.9.2...

5.3CVSS0.00218EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/27 1:34 a.m.•36 views

CVE-2025-62970

CVE-2025-62970 concerns a Missing Authorization vulnerability in the WordPress plugin Link Whisper Free . Multiple sources (NVD, Red Hat, EUVD, CIRCL, CVE lists, Patchstack) describe it as exploitable via an incorrectly configured access control on the Link Whisper Free plugin (versions up to at ...

5.3CVSS6AI score0.00218EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•20 views

PT-2025-43842

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through = 0.8.8...

5.3CVSS7AI score0.00218EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•6 views

CVE-2025-62970: Missing Authorization

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through = 0.9.2...

5.3CVSS6AI score0.00218EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•23 views

WordPress plugin Link Whisper Free security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

5.3CVSS5.8AI score0.00218EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/10/18 10:29 a.m.•16 views

WordPress Link Whisper Free plugin <= 0.9.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Link Whisper Free versions = 0.9.1...

5.3CVSS5.2AI score0.00218EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2004-0737

Malware in sbrugna...

7.5CVSS6.4AI score0.0245EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-7987

Malware in sbrugna...

8.6CVSS7.8AI score0.01085EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2018-21434

Malware in sbrugna...

6.8CVSS6.8AI score0.00417EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2018-3045

Malware in sbrugna...

6.1CVSS6.6AI score0.01336EPSS
SaveExploits3References7
Rows per page
Query Builder