CVE-2025-22306
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Jan 7, 2025
CWE ID 538
Summary
CVE-2025-22306 is a vulnerability affecting Link Whisper Free, where sensitive information can be inserted into externally-accessible files or directories. This issue allows unauthorized users to potentially manipulate data, posing a security risk. The vulnerability exists in Link Whisper Free versions from n/a through 0.7.7. It is essential for users to update their software to mitigate this risk and secure their data.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- WordPress Link Whisper Free
Affected Vendors
- LinkWhisper