Description
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages <= 2.15.27 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| wordplus | BP Better Messages | ≤ 2.15.27 | — |
High · 7.1
CVE-2026-84812
EUVD-2026-70570GHSA-x6v6-8ggm-g2q9
WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability
Published Sep 3, 2026 · Updated Sep 5, 2026 · Assigned by Patchstack