Sign in

4.3 Medium

CVE-2022-29441 Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress…

Description

Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages.

Affected products and versions

Product	Affected versions	Fixed in
Private Messages For WordPress (WordPress plugin) 2.1	earliest → 2.1.10	No fix stated

The 2 CVEs of Private Messages For WordPress (WordPress plugin) →

CVE-2022-29442 Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For… 5.4 Medium

Do you use Private Messages For WordPress (WordPress plugin)?

Track this CVE Watch Private Messages For WordPress (WordPress plugin) Check my SBOMs

www.cveye.io/en/cve/CVE-2022-29441

Timeline

Published June 15, 2022
Last modified April 28, 2026

References

wordpress.org wordpress.org
patchstack.com patchstack.com

Track this CVE