CVE Database /
CVE-2022-29454
CVE · Low
CVE-2022-29454 — Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages] < 1.9.9.149
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-29454
|
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots [bp-better-messages] < 1.9.9.149 |
Cross-Site Request Forgery (CSRF) |
Low
3.1
|
< 1.9.9.149
|
1.9.9.149 |
2022-01-18 |
—
|
CVE-2022-29454
The BP Better Messages plugin versions prior to 1.9.9.149 contain a cross-site request forgery vulnerability that could enable an attacker to trick authenticated users into performing unintended actions on the site. The flaw was identified by Brandon Roldan and affects users with elevated permissions who could be exploited through this method. Version 1.9.9.149 and later address this security issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings