Private Messages Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Private Messages Project records in CISA KEV

No Private Messages Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-11912 CVE-2022-29442 · GHSA-j9wf-5v5m-g6r9

LOW 25

Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress <= 2.1.10 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00568 Published 2022-06-15 No fix listed CWE-79

TI-2022-11911 CVE-2022-29441 · GHSA-f3hf-xwgv-vfqj

LOW 20

Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00421 Published 2022-06-15 No fix listed CWE-352