← Back to CVE List
CVE-2022-29454
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt