CRITICAL
9.3 CVE-2026-109688 Published 15 Oct 2026
Link Whisper Free WordPress Plugin Blind SQL Injection Vulnerability
Worried this affects your website?
Link Whisper Free, a WordPress plugin, contains a Blind SQL Injection vulnerability caused by improper neutralization of special elements used in an SQL command.
The issue affects Link Whisper Free versions from n/a through 0.9.7.
Reference: CVE-2026-109688 on NVD
← Back to Security News