Threat database

CVE-2026-109686 is a critical vulnerability in Link Whisper INC's Link Whisper Free plugin, affecting versions from initial release up to 0.9.7. It involves deserialization of untrusted data, leading to object injection. This flaw can allow an attacker to execute arbitrary code or cause denial of service without any user interaction or privileges.

CVE-2026-109685 is a high-severity reflected Cross-site Scripting (XSS) vulnerability in Link Whisper INC's Link Whisper Free plugin. It affects versions from initial releases up to 0.9.7. The flaw involves improper neutralization of input during web page generation, allowing an attacker to inject malicious scripts that execute in the context of the victim's browser. This vulnerability can lead to partial confidentiality, integrity, and availability impacts. No patch or remediation information is currently provided.

CVE-2026-109688 is a critical SQL Injection vulnerability in Link Whisper INC's Link Whisper Free plugin, affecting versions prior to 0.9.8. The flaw allows an attacker to perform Blind SQL Injection due to improper neutralization of special elements in SQL commands. This vulnerability can lead to high confidentiality impact and low availability impact without requiring user interaction or privileges.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.