Private Messages

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-29442 MEDIUM This Month

Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress <= 2.1.10 at WordPress. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS WordPress Private Messages

NVD

CVSS 3.1

5.4

EPSS

0.5%

CVE-2022-29441 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF WordPress Private Messages

NVD

CVSS 3.1

4.3

EPSS

0.4%

CVE-2022-29442

EPSS 1% CVSS 5.4

MEDIUM This Month

XSS WordPress Private Messages

NVD

CVE-2022-29441

EPSS 0% CVSS 4.3

MEDIUM This Month

CSRF WordPress Private Messages

NVD