Auth. (subscriber+) Server-Side Request Forgery (SSRF) vulnerability in Better Messages plugin 1.9.10.68 on WordPress.CreditsVulnerability discovered by Dhakal Ananda (Patchstack Alliance)Referenceshttps://wordpress.org/plugins/bp-better-messages/#developershttps://patchstack.com/database/vulnerability/bp-better-messages/wordpress-better-messages-plugin-1-9-10-68-server-side-request-forgery-ssrf-vulnerability?_s_id=cve
