CVE Intelligence

Spencer Haws vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Spencer Haws products: 4 record(s), with severity, exploitation and fixes.

Link Whisper Free 4

Exploited only (KEV) →

CVE-2026-57333 High · 7.1 CWE-79 Jun 29, 2026
WordPress Link Whisper Free plugin <= 0.9.4 - Reflected Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Link Whisper Free <= 0.9.4 versions.
CVE-2026-22357 High · 7.1 CWE-79 Feb 20, 2026
WordPress Link Whisper Free plugin <= 0.9.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spencer Haws Link Whisper Free link-whisper allows Reflected XSS.This issue affects Link Whisper Free: from n/a through <= 0.9.2.
CVE-2025-67927 High · 7.1 CWE-79 Jan 8, 2026
WordPress Link Whisper Free plugin <= 0.8.8 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spencer Haws Link Whisper Free link-whisper allows Reflected XSS.This issue affects Link Whisper Free: from n/a through <= 0.8.8.
CVE-2025-62970 Medium · 5.3 CWE-862 Oct 26, 2025
WordPress Link Whisper Free plugin <= 0.9.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Spencer Haws Link Whisper Free link-whisper allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through <= 0.9.2.