TI-2016-09239 CVE-2016-20063 · GHSA-w9r3-v9m2-5vxpSingle Personal Message 1.0.3 WordPress Plugin SQL InjectionPriority MEDIUM 64Single Personal Message 1.0.3 contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries by injecting malicious code through the message parameter.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00221 · Published 2026-06-09 · No fix listed CWE-89