Sensitive Data Exposure in Link Whisper Free WordPress Plugin
CVE-2025-22306

Currently unrated

Key Information:

Vendor
WordPress
Vendor
CVE Published:
7 January 2025

Summary

The Link Whisper Free plugin for WordPress is susceptible to an issue that allows sensitive information to be inserted into a publicly accessible file or directory. This can lead to unauthorized access to sensitive data, posing significant risks for users. The issue affects all versions of Link Whisper Free up to 0.7.7 and highlights the importance of securing plugins to prevent data exposure.

References

https://patchstack.com/database/wordpress/plugin/link-whi...

Timeline

  • Vulnerability published

.