PatchSiren

Link Whisper INC CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Link Whisper INC CVE published 2026-10-13

CVE-2026-109687

This debrief provides an analysis of CVE-2026-109687, a SQL Injection vulnerability in the WordPress Link Whisper Free plugin. The vulnerability is rated as HIGH with a CVSS score of 7.6. It affects versions up to 0.9.7 and allows for Blind SQL Injection. Defenders should assess exposure and prioritize patching. The CVE record and source item provide details on the vulnerability, but limited information i [truncated]