← CVE Intelligence

CVE-2026-1900

Link Whisper Free < 0.9.1 - Unauthenticated Settings and User Meta Update PUBLISHED

Description (CNA)

The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates.

Affected (CNA)

Vendor / productVersions
Unknown / Link Whisper Freeaffected 0 before 0.9.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.