Spencer Haws CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Spencer Haws CVE published 2026-01-08

CVE-2025-67927

A Cross-site Scripting vulnerability in Link Whisper Free plugin for WordPress allows Reflected XSS. This issue affects Link Whisper Free: from n/a through <= 0.8.8. The vulnerability could allow unauthenticated attackers to inject malicious scripts into web pages viewed by other users. Defenders should assess exposure and prioritize patching or mitigation to prevent potential reflected XSS attacks on una [truncated]