01 Record

CVE-2026-14601

Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter

MediumPUBLISHEDCNA: WPScan

Base score6.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

02 Description

Link Whisper < 0.9.7 - Editor+ SQL Injection via domain Parameter

Published

2026-08-21 06:00Z19 HR AGO

Last updated

2026-08-21 12:51Z12 HR AGO

Reserved

2026-07-03

Assigning CNA

WPScan

Record state

PUBLISHED

Severity

Medium (CVSS 6.8)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Weaknesses

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Base

SSVC decision

ExploitationnoneAutomatablenoTechnical Impactpartial

Data version

5.2

Document digest

ee51d91d67b08d4538a3775778d947d40b2a33e49045032f0732739379c3690f

VendorProductVersionsPlatforms

UnknownLink Whisper Free0 to < 0.9.7—