Linkwhspr

3 CVEs in 1 Linkwhspr product, including Link Whisper Free. Newest: CVE-2025-11262 (2026-05-29). Severity, EPSS and public exploits for each.

Linkwhspr products with known CVEs

ProductCVEs
Link Whisper Free3
Linkwhspr CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-11262High7.22026-05-29The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including, 0.9.0 d…
CVE-2025-11263Medium6.12025-12-06The Link Whisper Free plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the type parameter in all versions up to, and including, 0.8.8 d…
CVE-2024-2693High8.82024-04-09The Link Whisper Free plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.7.1 via deserialization of untrusted i…