4.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.8%
Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages.
patchstack.com/database/vulnerability/private-messages-for-wordpress/wordpress-private-messages-for-wordpress-plugin-2-1-10-sending-messages-via-cross-site-request-forgery-csrf-vulnerability
wordpress.org/plugins/private-messages-for-wordpress/