Login Request a demo
BM
Product
Better Messages
by Wordplus · last CVE Mar 1, 2025
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 4Medium 7Low 0
Severity
All severities11Critical0High4Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Better Messages to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-41609
8.8
1%
Nov 19
Auth. (subscriber+) Server-Side Request Forgery (SSRF) vulnerability in Better Messages plugin 1.9.10.68 on WordPress
Affected: before 1.9.10.69
CVE-2022-36389
8.8
0%
Aug 23
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress
Affected: through 1.9.9.148
CVE-2021-24809
8.8
1%
Nov 1
The BP Better Messages WordPress plugin before 1.9.9.41 does not check for CSRF in multiple of its AJAX actions: bp_better_messages_leave_chat, bp_better_messages_join_chat,…
Affected: before 1.9.9.41
CVE-2024-13611
7.5
0%
Mar 1
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Affected: before 2.7.0
CVE-2024-13697
6.5
0%
Mar 1
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links
Affected: before 2.7.5
CVE-2022-40216
6.5
1%
Nov 18
Auth. (subscriber+) Messaging Block Bypass vulnerability in Better Messages plugin <= 1.9.10.69 on WordPress
Affected: before 1.9.10.71
CVE-2022-33142
6.5
1%
Aug 23
Authenticated (subscriber+) Denial Of Service (DoS) vulnerability in WordPlus WordPress Better Messages plugin <= 1.9.10.57 at WordPress
Affected: before 1.9.10.58
CVE-2021-24808
6.1
1%
Nov 1
The BP Better Messages WordPress plugin before 1.9.9.41 sanitise (with sanitize_text_field) but does not escape the 'subject' parameter before outputting it back in an attribute,…
Affected: before 1.9.9.41
CVE-2024-13612
5.4
0%
Feb 1
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Affected: before 2.7.0
CVE-2023-49168
5.4
0%
Dec 14
WordPress BP Better Messages Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)
Affected: before 2.4.1
CVE-2022-29454
4.3
0%
Jul 20
Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin <= 1.9.9.148 at WordPress allows attackers to upload files
Affected: before 1.9.9.149
Showing 11