← Database

CVE-2022-29454

LOW CVSS: 3.1 Published: 2022-07-20 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.

Affected Platforms

Wordplus Better Messages

Weakness Type

CWE-352

References