Linkwhisper Link Whisper vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Linkwhisper Link Whisper: 1 record(s), with affected versions and fixes.cpe:2.3:a:linkwhisper:link_whisper
CVE-2026-1900
Medium · 6.5
CWE-306 Apr 7, 2026
Link Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta Update
The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates.