Lucene search

K
patchstackVlad Vector (Patchstack)PATCHSTACK:10DF8A3F3ACE19AE335D29C5773ADCE2
HistoryJan 18, 2022 - 12:00 a.m.

WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability

2022-01-1800:00:00
Vlad Vector (Patchstack)
patchstack.com
17
wordpress
better messages
cross-site request forgery
csrf
patchstack
update
security vulnerability

EPSS

0.001

Percentile

41.8%

Cross-Site Request Forgery (CSRF) vulnerability (at bp_messages_favorite) discovered by Vlad Vector (Patchstack) in WordPress Better Messages plugin (versions <= 1.9.9.148).

Solution

           Update the WordPress BP Better Messages plugin to the latest available version (at least 1.9.9.149).

EPSS

0.001

Percentile

41.8%

Related for PATCHSTACK:10DF8A3F3ACE19AE335D29C5773ADCE2