Is CVE-2026-14601 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-14601?

CVE-2026-14601 has a CVSS v3 severity of MEDIUM (6.8).

Back

CVE-2026-14601

Description

The Link Whisper Free WordPress plugin before 0.9.7 does not properly sanitize and escape a parameter before using it in a SQL query, allowing authenticated users with the Editor role or above to perform SQL injection attacks.