HIGH
WordPress Better Messages plugin <= 1.9.10.57 - Denial Of Service (DoS) vulnerability
Published Aug 23, 2022
7.7
HIGHCVSS 3.1
EPSS 1.11%
Description
Authenticated (subscriber+) Denial Of Service (DoS) vulnerability in WordPlus WordPress Better Messages plugin <= 1.9.10.57 at WordPress.
Affected products
-
- Version <= 1.9.10.57StatusaffectedConstraints<=1.9.10.57
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| WordPlus | Better Messages (WordPress plugin) | n/a |
|
- < 1.9.10.58
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Update to 1.9.10.58 or higher version.
Weaknesses (1)
References (2)
- https://patchstack.com/database/vulnerability/bp-better-messages/wordpress-better-messages-plugin-1-9-10-57-denial-of-service-dos-vulnerability x_refsource_CONFIRMPatchThird Party Advisory
- https://wordpress.org/plugins/bp-better-messages/#developers x_refsource_CONFIRMRelease NotesThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://patchstack.com/database/vulnerability/bp-better-messages/wordpress-better-messages-plugin-1-9-10-57-denial-of-service-dos-vulnerability | x_refsource_CONFIRMPatchThird Party Advisory | |
| https://wordpress.org/plugins/bp-better-messages/#developers | x_refsource_CONFIRMRelease NotesThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Patchstack
Published Aug 23, 2022
Updated Apr 28, 2026
Reserved Jul 22, 2022
Link CVE-2022-33142
CISA Vulnrichment
Updated Feb 20, 2025