Medium · 6.5 CVE-2023-32506 EUVD-2023-36750GHSA-vwj4-qq98-x49w

WordPress Link Whisper Free plugin <= 0.6.3 - Unauthenticated Broken Access Control vulnerability

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Link Whisper Product: Link Whisper Free

Description

Missing Authorization vulnerability in Link Whisper Link Whisper Free allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Link Whisper Free: from n/a through 0.6.3.

Affected products

Vendor	Product	Affected	Fixed
Link Whisper	Link Whisper Free	≤ 0.6.3	—

References

https://patchstack.com/database/wordpress/plugin/link-whisper/vulnerability/wordpress-link-whisper-free-plugin-0-6-3-unauthenticated-broken-access-control-vulnerability?_s_id=cve vdb-entry