CVE-2026-1900

The Link Whisper Free WordPress plugin (versions prior to 0.9.1 ) contains a vulnerability where a publicly accessible REST endpoint allows unauthenticated users to perform settings updates . Additionally, the vulnerability can be used to update user meta . Impacted versions are susceptible to un...