What’s Vulnerable › Products

wordplus BP Better Messages vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your wordplus BP Better Messages version is affected

Latest wordplus BP Better Messages vulnerabilities

• CVE-2026-114179 — WordPress BP Better Messages plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-84812 — WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-32547 — WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-42736 — WordPress BP Better Messages plugin <= 2.14.16 - Insecure Direct Object References (IDOR) vulnerability (CVSS 7.5)
• CVE-2024-32802 — WordPress Better Messages plugin <= 2.4.32 - Broken Authentication vulnerability (CVSS 5.3)