CVE-2026-109686
WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability
Published Oct 15, 2026 · updated Oct 15, 2026 · Link Whisper INC Link Whisper Free
Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Oct 15, 2026 · NIST NVD
Detected
Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.
Oct 15, 2026 · NIST NVD
Updated
Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.
Affected
- vendor Link Whisper INC Link Whisper Freeversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-109686
Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.
cve.org - NIST NVDVulnerability recordCVE-2026-109686
Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.
nvd.nist.gov