CVE-2019-9970

Open Whisper Signal aka Signal-Desktop through 1.23.1 and the Signal Private Messenger application through 4.35.3 for Android are vulnerable to an IDN homograph attack when displaying messages containing URLs. This occurs because the application produces a clickable link even if for example Latin...

PT-2025-7827 · Unknown · Videowhisper Live Streaming Integration

Name of the Vulnerable Software and Affected Versions: VideoWhisper Live Streaming Integration versions n/a through 6.2 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows unauthorized access to files and...

CVE-2024-27992

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Link Whisper Link Whisper Free allows Reflected XSS.This issue affects Link Whisper Free: from n/a through 0.6.8...

CVE-2024-13392

CVE-2024-13392 affects the Rate Star Review Vote – AJAX Reviews, Votes, Star Ratings plugin for WordPress. The vulnerability is Stored XSS via the videowhisper_reviews shortcode in versions up to 1.6.3, requiring authenticated access (contributor+). Wordfence and RH Red Hat records confirm the is...

CVE-2025-22306

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Spencer Haws Link Whisper Free link-whisper.This issue affects Link Whisper Free: from n/a through = 0.7.7...

CVE-2025-22306 WordPress Link Whisper Free plugin <= 0.7.7 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Spencer Haws Link Whisper Free link-whisper.This issue affects Link Whisper Free: from n/a through = 0.7.7...

CVE-2025-22306

CVE-2025-22306 affects Link Whisper Free; reported as an unauthenticated exposure of sensitive information in versions up to 0.7.7. Connected sources indicate the issue is mitigated by the patch release to 0.7.8. Technical details about the exact data exposed or vectors are not provided beyond th...

CVE-2025-22306 WordPress Link Whisper Free plugin <= 0.7.7 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Spencer Haws Link Whisper Free link-whisper.This issue affects Link Whisper Free: from n/a through = 0.7.7...

CVE-2025-22306: Insertion of Sensitive Information into Externally-Accessible File or Directory

Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in Spencer Haws Link Whisper Free link-whisper.This issue affects Link Whisper Free: from n/a through = 0.7.7...

PT-2025-4421

Name of the Vulnerable Software and Affected Versions Link Whisper Free versions 0.7.7 and earlier Description The issue involves inserting sensitive information into an externally-accessible file or directory. This allows unauthorized access to sensitive data. Recommendations For Link Whisper Fr...

WordPress Link Whisper Free plugin <= 0.7.7 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Link Whisper Free versions = 0.7.7...

CVE-2023-32506

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through = 0.6.3...

CVE-2023-32506

Missing Authorization vulnerability in Link Whisper Link Whisper Free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through 0.6.3...

CVE-2023-32506

CVE-2023-32506 is a real, publicly documented vulnerability affecting the WordPress plugin Link Whisper Free (versions

CVE-2023-32506 WordPress Link Whisper Free plugin <= 0.6.3 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through = 0.6.3...

CVE-2023-32506: Missing Authorization

Missing Authorization vulnerability in Link Whisper Link Whisper Free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through 0.6.3...

PT-2024-12328

Name of the Vulnerable Software and Affected Versions Link Whisper Free versions 0.6.3 and earlier Description The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This is an unauthenticated broken access...

PT-2024-33372 · Videowhisper.Com · Videowhisper.Com Contact Forms +3

Name of the Vulnerable Software and Affected Versions: VideoWhisper.Com Contact Forms, Live Support, CRM, Video Messages versions 1.10.2 and earlier Description: The issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This affects...

Link Whisper Free < 0.7.0

Description The Link Whisper Free plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6.9. This is due to missing or incorrect nonce validation on an unknown function. This makes it possible for unauthenticated attackers to perform an unknown...

CVE-2024-31219 Discourse-reactions' reaction data and public topic whisper content exposed on reactions given user activity page

Discourse-reactions is a plugin that allows user to add their reactions to the post. When whispers are enabled on a site via whispersallowedgroups and reactions are made on whispers on public topics, the contents of the whisper and the reaction data are shown on the /u/:username/activity/reaction...