Private Messages

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-29442 Jun 15, 16:15 MEDIUM This Month

Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress <= 2.1.10 at WordPress. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin Private Messages

NVD

CVSS 3.1

5.4

EPSS

0.5%

CVE-2022-29441 Jun 15, 16:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin Private Messages

NVD

CVSS 3.1

4.3

EPSS

0.4%

CVE-2022-29442

EPSS 1% CVSS 5.4

MEDIUM This Month

WordPress XSS Wordpress Plugin +1

NVD

CVE-2022-29441

EPSS 0% CVSS 4.3

MEDIUM This Month

WordPress CSRF Wordpress Plugin +1

NVD