Software intelligence
Important: Simple Personal Message appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works
Tracked advisories
2
Latest advisory
9 June 2026
CISA KEV matches
0
In this WordPress feed
WordPress slug
simple-personal-message
Plugin
This catalog lists 2 known advisories affecting Simple Personal Message. The most recent was published on 9 June 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.
Simple Personal Message <= 1.0.3 - Authenticated (Subscriber+) SQL Injection
May allow attackers to read or modify database contents beyond intended access.
Published 9 June 2026
Simple Personal Message < 2.0.0 - Authenticated SQL Injection
May allow attackers to read or modify database contents beyond intended access.
Published 6 December 2016
Known Simple Personal Message advisories published by month.
CVE-2016-20063 · Published 9 June 2026
Affected versions: ≤ 1.0.3
No CVE assigned · Published 6 December 2016
Affected versions: < 2.0.0
SiteRespond Defence matches your installed Simple Personal Message version against this catalog when the Defence plugin is connected to your WordPress site.