Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
WordplusBetter Messages

11 matches found

CVE
CVE•added 2022/07/20 7:15 p.m.•62 views

CVE-2022-29454

Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin

4.3CVSS4.4AI score0.00325EPSS
CVE
CVE•added 2022/08/23 4:15 p.m.•60 views

CVE-2022-36389

Cross-Site Request Forgery (CSRF) vulnerability in WordPlus Better Messages plugin

8.8CVSS6.5AI score0.00103EPSS
CVE
CVE•added 2023/12/14 3:15 p.m.•58 views

CVE-2023-49168

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WordPlus Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss allows Stored XSS.This issue affects Better Messages – Live Chat for WordPress, BuddyPress, PeepSo...

6.5CVSS6AI score0.00181EPSS
CVE
CVE•added 2022/11/19 12:15 a.m.•55 views

CVE-2022-41609

Auth. (subscriber+) Server-Side Request Forgery (SSRF) vulnerability in Better Messages plugin 1.9.10.68 on WordPress.

8.8CVSS7.5AI score0.00212EPSS
CVE
CVE•added 2022/08/23 4:15 p.m.•52 views

CVE-2022-33142

Authenticated (subscriber+) Denial Of Service (DoS) vulnerability in WordPlus WordPress Better Messages plugin

7.7CVSS6.6AI score0.00272EPSS
CVE
CVE•added 2022/11/18 11:15 p.m.•43 views

CVE-2022-40216

Auth. (subscriber+) Messaging Block Bypass vulnerability in Better Messages plugin

6.5CVSS5.4AI score0.0005EPSS
CVE
CVE•added 2025/03/01 9:15 a.m.•42 views

CVE-2024-13611

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.9 via the 'bp-better-messages' directory. This makes it possible for unauthenticated attackers...

7.5CVSS6.6AI score0.0008EPSS
CVE
CVE•added 2025/02/01 1:15 p.m.•40 views

CVE-2024-13612

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'better_messages_live_chat_button' shortcode in all versions up to, and including, 2.6.9 due to insufficient input sanitiz...

6.4CVSS5.7AI score0.00045EPSS
CVE
CVE•added 2025/03/01 9:15 a.m.•39 views

CVE-2024-13697

The Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.4 via the 'nice_links'. This makes it possible for unauthenticated attackers to make web requests...

6.5CVSS6.8AI score0.00064EPSS
CVE
CVE•added 2021/11/01 9:15 a.m.•33 views

CVE-2021-24808

The BP Better Messages WordPress plugin before 1.9.9.41 sanitise (with sanitize_text_field) but does not escape the 'subject' parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue

6.1CVSS6.1AI score0.0021EPSS
CVE
CVE•added 2021/11/01 9:15 a.m.•29 views

CVE-2021-24809

The BP Better Messages WordPress plugin before 1.9.9.41 does not check for CSRF in multiple of its AJAX actions: bp_better_messages_leave_chat, bp_better_messages_join_chat, bp_messages_leave_thread, bp_messages_mute_thread, bp_messages_unmute_thread, bp_better_messages_add_user_to_thread, bp_bette...

8.8CVSS8.7AI score0.003EPSS