DeluxeThemes Private Messages for UserPro

• CVE-2025-22322 High 7.1 WordPress Private Messages for UserPro plugin <= 4.10.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-22311 High 7.5 WordPress Private Messages for UserPro plugin <= 4.10.0 - Local File Inclusion vulnerability 0.6%