Skip to content
OpenAdvisories

Vendor

wordplus

22 known vulnerabilities.

Products

Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots 6 BP Better Messages 6 Better Messages (WordPress plugin) 5 Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages 4 Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.1
    CVE-2026-114179

    WordPress BP Better Messages plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better Messages bp-better-messages allows DOM-Based XSS.This issue affects BP Better Messages: from n/a through 3.1.3.

    wordplus BP Better Messages
  • High 7.1
    CVE-2026-84812

    WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.

    wordplus BP Better Messages
  • High 7.1
    CVE-2026-32547

    WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.

    wordplus BP Better Messages
  • High 7.2
    CVE-2026-16585

    Better Messages <= 2.15.19 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal via 'file' Parameter

    The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_sticker function in all versions up to, and including, 2.15.19. …

    wordplus Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots Web / CMS
  • High 7.5
    CVE-2026-42736

    WordPress BP Better Messages plugin <= 2.14.16 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in wordplus BP Better Messages bp-better-messages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BP Better Messages: from n/a through <= 2.14.16.

    wordplus BP Better Messages
  • High 7.5
    CVE-2024-13611

    Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory

    The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. This makes i…

    wordplus Better Messages – Live Chat, Chat Rooms, Real-Time Messaging & Private Messages Web / CMS
  • High 7.7
    CVE-2022-33142

    WordPress Better Messages plugin <= 1.9.10.57 - Denial Of Service (DoS) vulnerability

    Authenticated (subscriber+) Denial Of Service (DoS) vulnerability in WordPlus WordPress Better Messages plugin <= 1.9.10.57 at WordPress.

    wordplus Better Messages (WordPress plugin) Web / CMS