Security Advisory

CVE-2026-14601

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-21 06:00:16

Last updated 2026-08-21 12:51:00

Assigner WPScan

CVSS score 6.8

State PUBLISHED

Description

The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks.

← Browse all CVEs View on cve.org ↗