agentprime: wordplus-better-messages-chat-rooms-group-chat-private-messages-ai-chat-botsEvery new CVE for wordplus-better-messages-chat-rooms-group-chat-private-messages-ai-chat-bots.https://agentprime.io/CVE-2026-94376: Better Messages <= 3.0.4 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via User Display Namehttps://agentprime.io/advisories/CVE-2026-94376/https://agentprime.io/advisories/CVE-2026-94376/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 06:39:57 GMTCVECVE-2026-93899: Better Messages <= 3.0.4 - Authenticated (Subscriber+) SQL Injection via 'group_id' Message Meta Parameterhttps://agentprime.io/advisories/CVE-2026-93899/https://agentprime.io/advisories/CVE-2026-93899/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 06:39:53 GMTCVECVE-2026-89093: Better Messages <= 2.15.33 - Unauthenticated Information Exposure Spoofing via 'X-Real-IP' Header via /guests/registerhttps://agentprime.io/advisories/CVE-2026-89093/https://agentprime.io/advisories/CVE-2026-89093/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Sep 2026 02:27:11 GMTCVECVE-2026-89334: Better Messages <= 2.15.33 - Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure via '/thread/<id>' REST Endpointhttps://agentprime.io/advisories/CVE-2026-89334/https://agentprime.io/advisories/CVE-2026-89334/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Sep 2026 02:27:10 GMTCVECVE-2026-18555: Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress <= 2.15.22 - Reflected Cross-Site Scripting via 'icn' Parameterhttps://agentprime.io/advisories/CVE-2026-18555/https://agentprime.io/advisories/CVE-2026-18555/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 04:28:03 GMTCVECVE-2026-16585: Better Messages <= 2.15.19 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal via 'file' Parameterhttps://agentprime.io/advisories/CVE-2026-16585/https://agentprime.io/advisories/CVE-2026-16585/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 05:39:44 GMTCVE