Link Whisper Free vulnerabilities

2 known vulnerabilities in Link Whisper Free from Linkwhspr. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Link Whisper Free: Improper Neutralization of Input During Web Page Generation

  CVE-2025-11262May 29, 2026Linkwhspr

  The Link Whisper Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including, 0.9.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated

• 8.8 High severity

  Link Whisper Free: Deserialization of Untrusted Data

  CVE-2024-2693Apr 9, 2024Linkwhspr

  The Link Whisper Free plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 0.7.1 via deserialization of untrusted input of the 'mfn-page-items' post meta value. This makes it possible for authenticated attackers, wit