VendorsWordPlusbetter_messagesall versions
Vulnerabilities

WordPlus Better Messages

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs
CVE-2021-24809
BP Better Messages < 1.9.9.41 - Multiple CSRF
Published 2021-11-01 · Modified
8.8EPSS 0.007
CVE-2022-41609
WordPress Better Messages plugin <= 1.9.10.68 - Server-Side Request Forgery (SSRF) vulnerability
Published 2022-11-18 · Modified
8.8EPSS 0.006
CVE-2022-36389
WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability
Published 2022-08-23 · Modified
8.8EPSS 0.004
CVE-2022-33142
WordPress Better Messages plugin <= 1.9.10.57 - Denial Of Service (DoS) vulnerability
Published 2022-08-23 · Modified
7.7EPSS 0.011
CVE-2024-13611
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory
Published 2025-03-01 · Analyzed
7.5EPSS 0.005
CVE-2022-40216
WordPress Better Messages plugin <= 1.9.10.69 - Auth. Messaging Block Bypass vulnerability
Published 2022-11-18 · Modified
6.5EPSS 0.005
CVE-2023-49168
WordPress BP Better Messages Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)
Published 2023-12-14 · Modified
6.5EPSS 0.004
CVE-2024-13697
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links
Published 2025-03-01 · Analyzed
6.5EPSS 0.003
CVE-2024-13612
Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2025-02-01 · Analyzed
6.4EPSS 0.003
CVE-2021-24808
BP Better Messages < 1.9.9.41 - Reflected Cross-Site Scripting
Published 2021-11-01 · Modified
6.1EPSS 0.009
CVE-2022-29454
WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability
Published 2022-07-20 · Modified
4.3EPSS 0.003