Rilwis Private Messages For WordPress (WordPress plugin)

• CVE-2022-29442 Medium 5.4 Private Messages For WordPress <= 2.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%
• CVE-2022-29441 Medium 4.3 WordPress Private Messages For WordPress plugin <= 2.1.10 - Sending Messages via Cross-Site Request Forgery (CSRF) vulnerability 0.4%