Vulnerabilities / Link Whisper Free
Link Whisper Free vulnerabilities
Advisories WPSec published for Link Whisper Free. Other sources may list more. Its attack surface: Link Whisper Free on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0867 | Link Whisper Free <= 0.9.7 - Authenticated (Contributor+) PHP Object Injection via Link Whisper Post Meta | High 7.5 | 0.9.8 |
| 2026-10-14 | WPSEC-2026-0866 | Link Whisper Free <= 0.9.7 - Unauthenticated CSV Injection via Click Tracking Anchor Text | Medium 5.4 | 0.9.8 |
| 2026-10-14 | WPSEC-2026-0865 | Link Whisper Free <= 0.9.7 - Authenticated (Editor+) SQL Injection via 'orderby' and 'post_id' Parameters | Medium 4.9 | 0.9.8 |
| 2026-10-14 | WPSEC-2026-0864 | Link Whisper Free <= 0.9.7 - Authenticated (Subscriber+) Missing Authorization to Broken Link Scan, Link Ignore List and Plugin Option Updates | Medium 4.3 | 0.9.8 |
| 2026-10-14 | WPSEC-2026-0863 | Link Whisper Free <= 0.9.7 - Unauthenticated DOM-Based Reflected Cross-Site Scripting via 'wpil_admin_frontend_data' Parameter | Medium 6.1 | 0.9.8 |
License: CC BY 4.0