Skip to content

CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2022-29441

WordPress Private Messages For WordPress plugin <= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerability

Read JSON ↗CVE.org ↗

Status: Published
Published: 2022-06-15
Updated: 2026-04-28
Assigning organization: Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Rilwis Private Messages For WordPress (WordPress plugin)

<= 2.1.10 to ≤ 2.1.10affected

References