CVE-2022-29454: Wordplus Better Messages

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.

Affected products

• Wordplus Better Messages: before 1.9.9.149 (fixed in 1.9.9.149)

Published 2022-07-20. Last modified 2026-06-17.