Description
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.22 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wordplus | BP Better Messages | ≤ 2.15.22 | — |
High · 7.1
CVE-2026-32547
EUVD-2026-60910GHSA-w8j9-g92x-3rcc
WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability
Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack