Link Whisper Free
Healthy: released 23 days ago, tested with WordPress 7.1, no open vulnerabilities.
Based on 4 of 5 areas
| Ownership | 100 |
|---|---|
| Maintenance | 100 |
| Security | 60 |
| Support | No data |
| Reputation | 85 |
Active signals
Open issues right now, with links to the source.
- InfoSEC-313 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
History: 18 past vulnerabilities, all patched. Patched issues are listed in the Security record, not here.
Quick answers
- Is Link Whisper Free still maintained?
- Yes. Last release 13 Oct 2026, 18 releases in the last 24 months. 13 Oct 2026 · wordpress.org
- Who owns Link Whisper Free, and has it changed hands?
- No change recorded. Main committer mattbissett since Mar 2020. 4 Nov 2026 · SVN log
- Was Link Whisper Free removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Link Whisper Free safe?
- 18 known vulnerabilities, all fixed (latest in 0.9.8). Not on the exploited list. 13 Oct 2026 · Wordfence Intelligence
- Is the latest Link Whisper Free update safe to install?
- No ownership change before 0.9.8. No one-star spike after it. 13 Oct 2026 · Release history
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 14 Jan 2020 to 14 Jan 2020, 1 commits |
|---|---|
| linkwhspr | 11 Feb 2020 to 28 Sep 2021, 16 commits |
| mattbissett | 31 Mar 2020 to 13 Oct 2026, 104 commits |
3 committers recorded. No ownership changes recorded since 2020.
Maintenance
- Last release
- 23 days ago
- Releases, 24 months
- 18
- Tested up to
- 7.1 current
- Requires PHP
- 7.4 supported 8.2+
| Q1 2024 | 4 |
|---|---|
| Q2 2024 | 3 |
| Q3 2024 | 2 |
| Q4 2024 | 0 |
| Q1 2025 | 2 |
| Q2 2025 | 1 |
| Q3 2025 | 5 |
| Q4 2025 | 2 |
| Q1 2026 | 2 |
| Q2 2026 | 3 |
| Q3 2026 | 2 |
| Q4 2026 | 1 |
Last release 13 Oct 2026. Tested with WordPress 7.1 (current).
Support
- Resolved, last 2 months
- 0%
- Threads, last 2 months
- 4
Trend appears after 8 weekly snapshots.
Security record
13 vulnerabilities in 24 months (18 on record), all patched (latest fixed in 0.9.8).
Show 18 patched vulnerabilities
| Date | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 13 Oct 2026 | Authenticated (Contributor+) PHP Object Injection | 7.5 | <= 0.9.7 | 0.9.8 | Same day |
| 13 Oct 2026 | Reflected Cross-Site Scripting | 6.1 | <= 0.9.7 | 0.9.8 | Same day |
| 13 Oct 2026 | Unauthenticated SQL Injection | 7.5 | <= 0.9.7 | 0.9.8 | Same day |
| 13 Oct 2026 | Authenticated (Editor+) SQL Injection | 4.9 | <= 0.9.7 | 0.9.8 | Same day |
| 24 Aug 2026 | Authenticated (Editor+) SQL Injection | 4.9 | < 0.9.7 | 0.9.7 | Before disclosure |
| 29 Jun 2026 | Reflected Cross-Site Scripting | 6.1 | <= 0.9.4 | 0.9.5 | Before disclosure |
| 28 May 2026 | Unauthenticated Stored Cross-Site Scripting | 7.2 | <= 0.9.0 | 0.9.1 | Before disclosure |
| 7 Apr 2026 | Missing Authorization to Unauthenticated Settings Change | 5.3 | < 0.9.1 | 0.9.1 | Before disclosure |
| 16 Feb 2026 | Reflected Cross-Site Scripting | 6.1 | <= 0.9.2 | 0.9.3 | 73 |
| 5 Jan 2026 | Reflected Cross-Site Scripting | 6.1 | <= 0.8.8 | 0.8.9 | Before disclosure |
| 5 Dec 2025 | Reflected Cross-Site Scripting | 6.1 | <= 0.8.8 | 0.8.9 | Before disclosure |
| 18 Oct 2025 | Missing Authorization | 5.3 | <= 0.9.2 | 0.9.3 | 194 |
| 6 Jan 2025 | Unauthenticated Sensitive Information Exposure | 5.3 | <= 0.7.8 | 0.7.9 | 23 |
| 10 Apr 2024 | Link Whisper Free <= 0.6.9 | 4.3 | <= 0.6.9 | 0.7.0 | Before disclosure |
| 26 Mar 2024 | Authenticated (Contributor+) PHP Object Injection | 8.8 | <= 0.7.1 | 0.7.2 | Before disclosure |
| 15 Mar 2024 | Reflected Cross-Site Scripting | 6.1 | <= 0.6.8 | 0.6.9 | Before disclosure |
| 20 Nov 2023 | Authenticated (Contributor+) SQL Injection | 8.8 | <= 0.6.5 | 0.6.6 | Before disclosure |
| 10 May 2023 | Missing Authorization via init() | 5.3 | <= 0.6.3 | 0.6.4 | 8 |
Changelog mentions of security fixes: 0.9.4 (security); 0.9.5 (security, sanitize); 0.9.6 (security); 0.9.7 (security, sanitize); 0.9.8 (security, nonce, escaping).
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Reputation
Last 90 days: 5.0 (6 reviews). Lifetime: 4.2.
| Last 90 days | 5.0 |
|---|---|
| Lifetime | 4.2 |
| Q2 2026 | 4.5 |
|---|---|
| Q3 2026 | 5.0 |
| Q4 2026 | 5.0 |
Average rating rose from 4.5 to 5.0 between Q2 2026 and Q4 2026.
| 5 star | 110 |
|---|---|
| 4 star | 9 |
| 3 star | 1 |
| 2 star | 8 |
| 1 star | 23 |
- Disappointed with my recent experience with @LinkWhisper. · 1 star · 2 Jun 2026
- No Support Response for 5 Days (Paid Plan) · 1 star · 11 May 2026
- charging twice for site analysis and plugin functions · 1 star · 9 May 2026
Momentum
- Active installs
- 30,000+
- Downloads, last full week
- 3,956
| 4 May 2026 | 1,145 |
|---|---|
| 11 May 2026 | 14,550 |
| 18 May 2026 | 5,576 |
| 25 May 2026 | 2,560 |
| 1 Jun 2026 | 15,294 |
| 8 Jun 2026 | 3,323 |
| 15 Jun 2026 | 2,692 |
| 22 Jun 2026 | 1,989 |
| 29 Jun 2026 | 3,254 |
| 6 Jul 2026 | 3,008 |
| 13 Jul 2026 | 1,755 |
| 20 Jul 2026 | 14,002 |
| 27 Jul 2026 | 3,890 |
| 3 Aug 2026 | 3,988 |
| 10 Aug 2026 | 2,060 |
| 17 Aug 2026 | 15,902 |
| 24 Aug 2026 | 4,491 |
| 31 Aug 2026 | 2,404 |
| 7 Sep 2026 | 2,008 |
| 14 Sep 2026 | 2,282 |
| 21 Sep 2026 | 1,860 |
| 28 Sep 2026 | 1,911 |
| 5 Oct 2026 | 1,917 |
| 12 Oct 2026 | 15,615 |
| 19 Oct 2026 | 3,794 |
| 26 Oct 2026 | 3,956 |
Weekly downloads over the last 4 weeks are 22% above the 26-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score. Never sponsored.
Facts
- Version
- 0.9.8
- Author
- Spencer Haws
- Added
- 11 Feb 2020
- Last updated
- 13 Oct 2026
- Active installs
- 30,000+
- Requires WordPress
- 4.6
- Tested up to
- 7.1.4
- Requires PHP
- 7.4
- Category
- Content Management > Blog & Article Publishing
- Tags
- seo, links, link building, orphan content, internal linking
Questions about Link Whisper Free
Is Link Whisper Free still maintained?
Yes. Last release 13 Oct 2026, 18 releases in the last 24 months.
Who owns Link Whisper Free, and has it changed hands?
No change recorded. Main committer mattbissett since Mar 2020.
Was Link Whisper Free removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Link Whisper Free safe?
18 known vulnerabilities, all fixed (latest in 0.9.8). Not on the exploited list.
Is the latest Link Whisper Free update safe to install?
No ownership change before 0.9.8. No one-star spike after it.