5.3
Medium
CVE-2024-32802 Missing Authorization vulnerability in WordPlus BP Better Messages allows Accessing Functionality Not Properly…
Description
Missing Authorization vulnerability in WordPlus BP Better Messages allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BP Better Messages: from n/a through 2.4.32.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BP Better Messages 2.4 | earliest → 2.4.32 | No fix stated |
Other CVEs of BP Better Messages
The 5 CVEs of BP Better Messages →
CVE-2026-114179
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better…
7.1
High
CVE-2026-84812
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions
7.1
High
CVE-2026-32547
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions
7.1
High
CVE-2026-42736
Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages…
7.5
High