| Package | Affected versions | Patched versions |
|---|---|---|
| better messages | < 1.9.9.149 | 1.9.9.149 |
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files. File attachment to messages must be activated.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free