Medium · 6.4 CVE-2022-41609 EUVD-2022-44800GHSA-77m6-v5mw-jgf7

WordPress Better Messages plugin <= 1.9.10.68 - Server-Side Request Forgery (SSRF) vulnerability

Published Nov 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (subscriber+) Server-Side Request Forgery (SSRF) vulnerability in Better Messages plugin 1.9.10.68 on WordPress.

Vendor	Product	Affected	Fixed
WordPlus	Better Messages (WordPress plugin)	<= 1.9.10.68 – ≤ 1.9.10.68	—