Security Advisory

CVE-2022-29454

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-07-20 18:36:46
Last updated 2026-04-28 16:07:42
Assigner Patchstack
CVSS score 3.1
State PUBLISHED

Description

Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.