Vulnerability Details CVE-2026-1900
The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 10.4%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2026-1900
-
cpe:2.3:a:linkwhisper:link_whisper:*