CVE Intelligence

Wordplus BP Better Messages vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Wordplus BP Better Messages: 3 record(s), with affected versions and fixes.

CVE-2026-84812 High · 7.1 CWE-79 Sep 3, 2026
WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.
CVE-2026-32547 High · 7.1 CWE-79 Aug 18, 2026
WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.
CVE-2026-42736 High · 7.5 CWE-639 May 27, 2026
WordPress BP Better Messages plugin <= 2.14.16 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BP Better Messages: from n/a through <= 2.14.16.