Advisories · Technology

wordplus BP Better Messages.

Every CVE that names wordplus BP Better Messages among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-114179 CVE record

CVSS 7.1 High

WordPress BP Better Messages plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability
- wordplus BP Better Messages
- Cross-site scripting (XSS)
Not analysed yet 24 Oct 2026
CVE-2026-84812 CVE record

CVSS 7.1 High

WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability
- wordplus BP Better Messages
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2026
CVE-2026-32547 CVE record

CVSS 7.1 High

WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability
- wordplus BP Better Messages
- Cross-site scripting (XSS)
Not analysed yet 18 Aug 2026
CVE-2026-42736 CVE record

CVSS 7.5 High

WordPress BP Better Messages plugin <= 2.14.16 - Insecure Direct Object References (IDOR) vulnerability
- wordplus BP Better Messages
- Broken access control
Not analysed yet 27 May 2026
CVE-2024-32802 CVE record

CVSS 5.3 Medium

WordPress Better Messages plugin <= 2.4.32 - Broken Authentication vulnerability
- WordPlus BP Better Messages
- Broken access control
Not analysed yet 17 May 2024