Product · rilwis

Private Messages For WordPress (WordPress plugin)

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.4

CVE-2022-29442

Private Messages For WordPress <= 2.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress <= 2.1.10 at WordPress.

rilwis Private Messages For WordPress (WordPress plugin) Web / CMS

Jun 15, 2022
Medium 4.3

CVE-2022-29441

WordPress Private Messages For WordPress plugin <= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages.

rilwis Private Messages For WordPress (WordPress plugin) Web / CMS

Jun 15, 2022