plugin

Private Messages For Wordpress Vulnerabilities

2 known security issues reported for the Private Messages For Wordpress WordPress plugin. Most recent disclosed May 26, 2022.

2 medium

Running Private Messages For Wordpress on your site? Check whether your installed version is affected.

Scan your site free

Private Messages For WordPress <= 2.1.10 - Stored Cross-Site Scripting

medium

Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress <= 2.1.10 at WordPress.

medium

Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages.

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free