All 6 CVE vulnerabilities found in BP Better Messages, with AI-generated Chinese analysis, references, and POCs.
Vendor: Unknown
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-84812 | WordPress BP Better Messages plugin <= 2.15.27 - Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2026-09-03 |
| CVE-2026-32547 | WordPress BP Better Messages plugin <= 2.15.22 - Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2026-08-18 |
| CVE-2026-42736 | WordPress BP Better Messages plugin <= 2.14.16 - Insecure Direct Object References (IDOR) vulnerability CWE-639 | 7.5 | High | 2026-05-27 |
| CVE-2024-32802 | WordPress Better Messages plugin <= 2.4.32 - Broken Authentication vulnerability CWE-862 | 5.3 | Medium | 2024-05-17 |
| CVE-2021-24809 | BP Better Messages < 1.9.9.41 - Multiple CSRF CWE-352 | 8.8 | - | 2021-11-01 |
| CVE-2021-24808 | BP Better Messages < 1.9.9.41 - Reflected Cross-Site Scripting CWE-79 | 6.1 | - | 2021-11-01 |
All 6 known CVE vulnerabilities affecting BP Better Messages with full Chinese analysis, references, and POCs where available.