All packages
BP Better Messages vulnerabilities
3 known CVE vulnerabilities in BP Better Messages, translated and rated.
- CVE-2026-84812High
Unauthenticated Cross Site Scripting (XSS) in BP Better Messages versions up to 2.15.27.
- CVE-2026-42736High
CVE-2026-42736 describes an authorization bypass vulnerability through a user-controlled key in the BP Better Messages plugin. This issue affects versions from n/a through 2.14.16 inclusive.
- CVE-2026-32547High
BP Better Messages versions up to 2.15.22 contain an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject a malicious script that executes in the victim's browser.