Security Advisory

CVE-2022-29454

3.1
LOW

Vulnerability Description

Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.
Published Date July 20, 2022
Official Source NIST NVD Advisory