3.1
Faible
CVE-2022-29454 Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages…
Description
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Better Messages (WordPress plugin) 1.9 | premières → 1.9.9.148 | Pas de correctif indiqué |
Autres CVE de Better Messages (WordPress plugin)
Les 5 CVE de Better Messages (WordPress plugin) →
CVE-2022-41609
Auth
6.4
Moyenne
CVE-2022-40216
Auth
4.3
Moyenne
CVE-2022-36389
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress
4.3
Moyenne
CVE-2022-33142
Authenticated (subscriber+) Denial Of Service (DoS) vulnerability in WordPlus WordPress Better Messages…
7.7
Élevée