What’s Vulnerable › Products

DeluxeThemes Private Messages for UserPro vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your DeluxeThemes Private Messages for UserPro version is affected

Latest DeluxeThemes Private Messages for UserPro vulnerabilities

• CVE-2025-22322 — WordPress Private Messages for UserPro plugin <= 4.10.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-22311 — WordPress Private Messages for UserPro plugin <= 4.10.0 - Local File Inclusion vulnerability (CVSS 7.5)