Skip to content
OpenAdvisories
High · 7.1 CVE-2025-67927 EUVD-2026-1552GHSA-4hhh-jc35-rrwh

WordPress Link Whisper Free plugin <= 0.8.8 - Cross Site Scripting (XSS) vulnerability

Published Jan 8, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spencer Haws Link Whisper Free link-whisper allows Reflected XSS.This issue affects Link Whisper Free: from n/a through <= 0.8.8.

Affected products

VendorProductAffectedFixed
Spencer Haws Link Whisper Free ≤ 0.8.8 —

References