Approved changes feed: RSS · Atom

cpe:2.3:a:private_messages_project:private_messages:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorPrivate Messages Project (f1307961-9aeb-55db-97eb-ff85512c0387)
ProductPrivate Messages (e0474ca5-8be5-5175-bf86-8ea0f7797870)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29442 vulnerable 2026-06-08 05:42:47.745282 Private Messages For WordPress <= 2.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
MEDIUM (5.4)
Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress <= 2.1.10 at WordPress.
Published: 2022-06-15T15:38:43.691Z
Updated: 2026-04-28T16:07:42.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29441 vulnerable 2026-06-08 05:42:47.744690 WordPress Private Messages For WordPress plugin <= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Private Messages For WordPress plugin <= 2.1.10 at WordPress allows attackers to send messages.
Published: 2022-06-15T15:35:56.597Z
Updated: 2026-04-28T16:07:42.090Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.