Private Messages for UserPro

Vulnerabilities 2Slug userpro-messagingLatest version 1.0Plugin page →

Minimum safe version

—

No explicit fix version available

Latest available1.0 ✗⚠ 2 vulnerabilities have no fix
High 7.1 Unfixed
2025-01-21≤ 4.10.0

WordPress Private Messages for UserPro plugin <= 4.10.0 - Reflected Cross Site Scripting (XSS) vulnerability

CVEWordfence
High 7.5 Unfixed
2025-01-21≤ 4.10.0

WordPress Private Messages for UserPro plugin <= 4.10.0 - Local File Inclusion vulnerability

CVEPatchstackWordfence