5.3
Moyenne
CVE-2024-32802 Missing Authorization vulnerability in WordPlus BP Better Messages allows Accessing Functionality Not Properly…
Description
Missing Authorization vulnerability in WordPlus BP Better Messages allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BP Better Messages: from n/a through 2.4.32.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BP Better Messages 2.4 | premières → 2.4.32 | Pas de correctif indiqué |
Autres CVE de BP Better Messages
Les 5 CVE de BP Better Messages →
CVE-2026-114179
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better…
7.1
Élevée
CVE-2026-84812
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions
7.1
Élevée
CVE-2026-32547
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions
7.1
Élevée
CVE-2026-42736
Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages…
7.5
Élevée