Lucene search
+L

1 matches found

Cvelist
Cvelist
•added 2026/09/25 6:39 a.m.•8 views

CVE-2026-93899 Better Messages <= 3.0.4 - Authenticated (Subscriber+) SQL Injection via 'group_id' Message Meta Parameter

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to generic SQL Injection via 'groupid' Message Meta Parameter in all versions up to, and including, 3.0.4 due to insufficient escaping on the user supplied parameter and lack of...

6.5CVSS0.00269EPSS
SaveExploits0References6
Rows per page
Query Builder