← WordPress Vulnerabilities
WordPress security by component

Single Personal Message

Single Personal Message is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 09, 2026; the highest CVE/CNA score is 7.1.

Plugin slug: simple-personal-message

CVE-2016-20063: Single Personal Message: SQL injection

Single Personal Message is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 1.0.3.

PublishedJun 09, 2026
Safe version guidanceSee mitigation notes
Safe version
Jun 09, 2026 CVE-2016-20063
Single Personal Message: SQL injection
Single Personal Message is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 1.0.3.
See mitigation notes
CVE7.1
NVDPending