Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-14601 SQL Injection in Link Whisper Free WordPress Plugin Before 0.9.7 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-14601
Post summary
The post announces an SQL Injection CVE-2026-14601 affecting Link Whisper Free WordPress Plugin versions prior to 0.9.7, without providing exploitation or mitigation details.
🚨*CVE* CVE-2026-14601 The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users wit… https://www.cve.org/CVERecord?id=CVE-2026-14601 ----- Traducción: CVE-2026-14601 El … http://infoflow.cloud`
Post summary
The post discloses an SQL injection flaw in Link Whisper Free WordPress plugin versions prior to 0.9.7, noting a lack of parameter sanitization for authenticated users, with no exploit or patch information provided.
CVE-2026-14601 The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users wit… https://www.cve.org/CVERecord?id=CVE-2026-14601
Post summary
CVE-2026-14601 is a SQL injection vulnerability in the Link Whisper Free WordPress plugin (versions prior to 0.9.7) that allows authenticated users to execute arbitrary SQL; no exploit or patch information is included.