Medium · 4.3 CVE-2022-29441 EUVD-2022-33779GHSA-f3hf-xwgv-vfqj

WordPress Private Messages For WordPress plugin <= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerability

Published Jun 15, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages.

Vendor	Product	Affected	Fixed
Rilwis	Private Messages For WordPress (WordPress plugin)	<= 2.1.10 – ≤ 2.1.10	—