CRITICAL
9.8 CVE-2026-109686 Published 15 Oct 2026
Link Whisper Free WordPress Plugin Deserialization Object Injection Vulnerability
Worried this affects your website?
A Deserialization of Untrusted Data vulnerability has been found in Link Whisper Free, the WordPress link-whisper plugin. It allows Object Injection.
The issue affects Link Whisper Free from n/a through 0.9.7.
Reference: CVE-2026-109686 on NVD
← Back to Security News