Login Request a demo
BM
Product
Better Messages
by Wordplus · last CVE Mar 1, 2025
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 0High 4Medium 7Low 0
Severity
All severities11Critical0High4Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Better Messages to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-41609
8.8
1%
Nov 18
WordPress Better Messages plugin <= 1.9.10.68 - Server-Side Request Forgery (SSRF) vulnerability
Affected: before 1.9.10.69
CVE-2022-36389
8.8
0%
Aug 23
WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability
Affected: through 1.9.9.148
CVE-2021-24809
8.8
1%
Nov 1
The BP Better Messages WordPress plugin before 1.9.9.41 does not check for CSRF in multiple of its AJAX actions: bp_better_messages_leave_chat, bp_better_messages_join_chat,…
Affected: before 1.9.9.41
CVE-2024-13611
7.5
0%
Mar 1
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Affected: before 2.7.0
Showing 4