Skip to contentWordplus Better Messages – Chat Rooms, Group Chat, Private Messages & Ai Chat Bots vulnerabilities
- wordplus better messages – chat rooms, group chat, private messages & ai chat botsBetter Messages <= 3.0.4 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via User Display NameCVE-2026-943766.4 Medium
- wordplus better messages – chat rooms, group chat, private messages & ai chat botsBetter Messages <= 3.0.4 - Authenticated (Subscriber+) SQL Injection via 'group_id' Message Meta ParameterCVE-2026-938996.5 Medium
- wordplus better messages – chat rooms, group chat, private messages & ai chat botsBetter Messages <= 2.15.33 - Unauthenticated Information Exposure Spoofing via 'X-Real-IP' Header via /guests/registerCVE-2026-890935.3 Medium
- wordplus better messages – chat rooms, group chat, private messages & ai chat botsBetter Messages <= 2.15.33 - Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure via '/thread/<id>' REST EndpointCVE-2026-893346.5 Medium
- wordplus better messages – chat rooms, group chat, private messages & ai chat botsBetter Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress <= 2.15.22 - Reflected Cross-Site Scripting via 'icn' ParameterCVE-2026-185556.1 Medium
- wordplus better messages – chat rooms, group chat, private messages & ai chat botsBetter Messages <= 2.15.19 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal via 'file' ParameterCVE-2026-165857.2 High