WordPress BP Better Messages plugin <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links vulnerability

Unauthenticated Limited Server-Side Request Forgery in nicelinks vulnerability discovered by Tim Coen in WordPress Plugin BP Better Messages versions = 2.7.4...