SQL Injection Vulnerability in Link Whisper Free by Link Whisper INC
CVE-2026-109688

9.3CRITICAL

Key Information:

Vendor

WordPress
Status
Link Whisper Free
Vendor
CVE Published:
15 October 2026

What is CVE-2026-109688?

Link Whisper Free by Link Whisper INC is susceptible to a Blind SQL Injection vulnerability that allows attackers to manipulate SQL queries. This flaw can lead to unauthorized access to sensitive data, potentially compromising the security of WordPress installations. Users of Link Whisper Free, particularly those using versions up to 0.9.7, should take immediate action to address this vulnerability and safeguard their websites.

Affected Version(s)

Link Whisper Free 0 <= 0.9.7

References

https://patchstack.com/database/wordpress/plugin/link-whi...
vdb-entry

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

dzaku | Patchstack Bug Bounty Program
.