CVE-2026-109686

CRITICAL 9.8CVE-2026-109686 · Published 15/10/2026 · updated 15/10/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0.9.7.

References

patchstack.com/database/wordpress/plugin/link-whisper/vulnerability/wordpress-link-whisper-free-plugin-0-9-7-php-object-injection-vulnerability

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free