Wordplus Better Messages vulnerabilities

• wordplus better messages, better messages – live chat, chat rooms, real-time messaging & private messages +1 more Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.7.4 - Unauthenticated Limited Server-Side Request Forgery in nice_links CVE-2024-13697 4.8 MediumMarch 1, 2025
• wordplus better messages, better messages – live chat, chat rooms, real-time messaging & private messages +1 more Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Unauthenticated Sensitive Information Exposure Through Unprotected Directory CVE-2024-13611 7.5 HighMarch 1, 2025
• wordplus better messages, better messages – live chat, chat rooms, real-time messaging & private messages +1 more Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2024-13612 6.4 MediumFebruary 1, 2025
• wordplus better messages – live chat for wordpress, buddypress, peepso, ultimate member, buddyboss, better messages +1 more WordPress BP Better Messages Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49168 6.5 MediumDecember 14, 2023
• wordplus better messages, better messages (wordpress plugin) +1 more WordPress Better Messages plugin <= 1.9.10.68 - Server-Side Request Forgery (SSRF) vulnerability CVE-2022-41609 6.4 MediumNovember 18, 2022
• wordplus better messages, better messages (wordpress plugin) +1 more WordPress Better Messages plugin <= 1.9.10.69 - Auth. Messaging Block Bypass vulnerability CVE-2022-40216 4.3 MediumNovember 18, 2022
• wordplus better messages, better messages (wordpress plugin) +1 more WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-36389 4.3 MediumAugust 23, 2022
• wordplus better messages, better messages (wordpress plugin) +1 more WordPress Better Messages plugin <= 1.9.10.57 - Denial Of Service (DoS) vulnerability CVE-2022-33142 7.7 HighAugust 23, 2022
• wordplus better messages, better messages (wordpress plugin) +1 more WordPress Better Messages plugin <= 1.9.9.148 - Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-29454 3.1 LowJuly 20, 2022
• unknown bp better messages, wordplus better messages +1 more BP Better Messages < 1.9.9.41 - Multiple CSRF CVE-2021-24809 8.8 HighNovember 1, 2021
• unknown bp better messages, wordplus better messages +1 more BP Better Messages < 1.9.9.41 - Reflected Cross-Site Scripting CVE-2021-24808 6.1 MediumNovember 1, 2021