Wordplus

Better Messages

20 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2026-94376

  • EPSS 0.19%
  • Veröffentlicht 25.09.2026 06:39:57
  • Zuletzt bearbeitet 25.09.2026 14:17:24

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via User Display Name in all versions up to, and including, 3.0.4 due to insufficient input sani...

6.5

CVE-2026-93899

  • EPSS 0.27%
  • Veröffentlicht 25.09.2026 06:39:53
  • Zuletzt bearbeitet 25.09.2026 14:17:24

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to generic SQL Injection via 'group_id' Message Meta Parameter in all versions up to, and including, 3.0.4 due to insufficient escaping o...

5.3

CVE-2026-89093

  • EPSS 0.33%
  • Veröffentlicht 19.09.2026 02:27:11
  • Zuletzt bearbeitet 21.09.2026 13:33:33

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Information Exposure by Spoofing in all versions up to, and including, 2.15.33. This is due to the `is_ai_bot_user()` function identif...

6.5

CVE-2026-89334

  • EPSS 0.4%
  • Veröffentlicht 19.09.2026 02:27:10
  • Zuletzt bearbeitet 21.09.2026 13:33:33

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.15.33. This is due to the plugin not properly verifying that a user is au...

6.1

CVE-2026-18555

  • EPSS 0.23%
  • Veröffentlicht 16.09.2026 04:28:03
  • Zuletzt bearbeitet 18.09.2026 18:17:05

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'icn' parameter in all versions up to, and including, 2.15.22 due to insufficient input sanitiz...

7.1

CVE-2026-84812

  • EPSS 0.15%
  • Veröffentlicht 03.09.2026 16:31:57
  • Zuletzt bearbeitet 05.09.2026 02:17:18

Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.

7.2

CVE-2026-16585

  • EPSS 0.73%
  • Veröffentlicht 28.07.2026 05:39:44
  • Zuletzt bearbeitet 28.07.2026 16:17:32

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_sticker function in all versions up to, and including, ...

6.1

CVE-2025-14154

  • EPSS 0.2%
  • Veröffentlicht 17.12.2025 05:24:55
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Stored Cross-Site Scripting via guest display name in all versions up to, and including, 2.10.2 due to insufficient in...

7.5

CVE-2024-13611

  • EPSS 0.48%
  • Veröffentlicht 01.03.2025 09:15:09
  • Zuletzt bearbeitet 26.05.2025 01:26:51

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. Thi...

6.5

CVE-2024-13697

  • EPSS 0.27%
  • Veröffentlicht 01.03.2025 09:15:09
  • Zuletzt bearbeitet 26.05.2025 01:24:15

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.4 via the 'nice_links'. This makes it possible f...