Wordplus

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 22
    Known Exploited: 0
    0
    Critical Level Threats
    7
    High Level Threats
    14
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-94376

    Better Messages <= 3.0.4 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via User Display Name

    Last Modified: Sep 25, 2026
    Published: Sep 25, 2026

    CVE-2026-93899

    Better Messages <= 3.0.4 - Authenticated (Subscriber+) SQL Injection via 'group_id' Message Meta Parameter

    Last Modified: Sep 25, 2026
    Published: Sep 25, 2026

    CVE-2026-89093

    Better Messages <= 2.15.33 - Unauthenticated Information Exposure Spoofing via 'X-Real-IP' Header via /guests/register

    Last Modified: Sep 20, 2026
    Published: Sep 19, 2026

    CVE-2026-89334

    Better Messages <= 2.15.33 - Missing Authorization to Authenticated (Custom+) Chat-Room Transcript Disclosure via '/thread/<id>' REST Endpoint

    Last Modified: Sep 19, 2026
    Published: Sep 19, 2026

    CVE-2026-18555

    Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress <= 2.15.22 - Reflected Cross-Site Scripting via 'icn' Parameter

    Last Modified: Sep 18, 2026
    Published: Sep 16, 2026
    Items Per Page