CVE-2022-29441

The CVE-2022-29441 entry concerns the WordPress Private Messages plugin (versions 2.1.10 and earlier). The affected component is the Private Messages feature in the plugin, with a CSRF (Cross-Site Request Forgery) weakness that enables an attacker to cause a logged-in user to send messages withou...

CVE-2022-29441: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Private Messages For WordPress plugin = 2.1.10 at WordPress allows attackers to send messages...