Rilwis Private Messages For WordPress (WordPress Plugin)
2 CVEs affecting Rilwis Private Messages For WordPress (WordPress Plugin). Latest disclosed: 2022-06-15. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-29442 | Medium | 5.4 | 2022-06-15 | Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress <= 2.1.10 at WordPress. |
CVE-2022-29441 | Medium | 4.3 | 2022-06-15 | Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages. |