3.1
Low
CVE-2022-29454 Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages…
Description
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Better Messages (WordPress plugin) 1.9 | earliest → 1.9.9.148 | No fix stated |
Other CVEs of Better Messages (WordPress plugin)
The 5 CVEs of Better Messages (WordPress plugin) →
CVE-2022-41609
Auth
6.4
Medium
CVE-2022-40216
Auth
4.3
Medium
CVE-2022-36389
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress
4.3
Medium
CVE-2022-33142
Authenticated (subscriber+) Denial Of Service (DoS) vulnerability in WordPlus WordPress Better Messages…
7.7
High