Skip to content
OpenAdvisories

Product · wordplus

BP Better Messages

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-124257

    WordPress BP Better Messages plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better Messages bp-better-messages allows Stored XSS.This issue affects BP Better Messages: from n/a through 3.2.1.

    wordplus BP Better Messages
  • Medium 5.3
    CVE-2024-32802

    WordPress Better Messages plugin <= 2.4.32 - Broken Authentication vulnerability

    Missing Authorization vulnerability in WordPlus BP Better Messages allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects BP Better Messages: from n/a through 2.4.32.

    wordplus BP Better Messages