Skip to contentWordplus Better Messages – Live Chat, Chat Rooms, Real-time Messaging & Private Messages vulnerabilities
- 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 moreFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterCVE-2024-133626.1 Medium
- wordplus better messages – live chat, chat rooms, real-time messaging & private messagesBetter Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.10.2 - Unauthenticated Stored Cross-Site ScriptingCVE-2025-141546.1 Medium
- wordplus better messages, better messages – live chat, chat rooms, real-time messaging & private messages +1 moreBetter Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_linksCVE-2024-136974.8 Medium
- wordplus better messages, better messages – live chat, chat rooms, real-time messaging & private messages +1 moreBetter Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected DirectoryCVE-2024-136117.5 High
- wordplus better messages, better messages – live chat, chat rooms, real-time messaging & private messages +1 moreBetter Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-136126.4 Medium
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium