Known vulnerabilities in WordPlus BP Better Messages
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-114179 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better… | 7.1 High | Oct 24, 2026 |
| CVE-2026-84812 | Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions | 7.1 High | Sep 3, 2026 |
| CVE-2026-32547 | Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions | 7.1 High | Aug 18, 2026 |
| CVE-2026-42736 | Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages… | 7.5 High | May 27, 2026 |
| CVE-2024-32802 | Missing Authorization vulnerability in WordPlus BP Better Messages allows Accessing Functionality Not Properly… | 5.3 Medium | May 17, 2024 |
Other WordPlus products
Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots 6
Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages 6
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss 6
Better Messages (WordPress plugin) 5
Better Messages – Integration for WC Vendors Marketplace 1
Better Messages – WCFM Integration 1