Private Messages Project Private Messages
2 CVEs affecting Private Messages Project Private Messages. Latest disclosed: 2022-06-15. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29442 | Medium | 5.4 | 2022-06-15 | Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress <= 2.1.10 at WordPress. |
CVE-2022-29441 | Medium | 4.3 | 2022-06-15 | Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages. |