CVE-2026-109688
CVE-2026-109688 · WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.
CVSS 9.3 · Critical · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
link whisper free
- Versions
- ≥ 0, ≤ 0.9.7: Affected; ≥ 0.9.8: Not affected (custom)
Update to 0.9.8