6.4
Medium
CVE-2022-41609 Auth
Description
Auth. (subscriber+) Server-Side Request Forgery (SSRF) vulnerability in Better Messages plugin 1.9.10.68 on WordPress.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Better Messages (WordPress plugin) 1.9 | earliest → 1.9.10.68 | No fix stated |
Other CVEs of Better Messages (WordPress plugin)
The 5 CVEs of Better Messages (WordPress plugin) →
CVE-2022-40216
Auth
4.3
Medium
CVE-2022-36389
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress
4.3
Medium
CVE-2022-33142
Authenticated (subscriber+) Denial Of Service (DoS) vulnerability in WordPlus WordPress Better Messages…
7.7
High
CVE-2022-29454
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages…
3.1
Low